cd8e3ed02af84465259ca1e8c79b968d8a0949e9c846098d407ed2a2257737503cc7b541be690f5e704f7cb5a28141da67a46dde7923af7a43eb4c4ab9d4feb41570cca6a5d91acf8757c854806216e4b0058074b67797a2d6059bdf579b5756d44d24cc2c6a5b090456b36811be97c09724544905d410189958140afb97be35074d8de458dc8b24517f69eacb0ede4917aa96b0fcf5c8b84f94a4304040224f01bc3b548f5c300757a6008896c8d2a638c470ac017c85fc5ec36db2ff5e8837b39398234cd964646271dddb2d8a341847af390b78b539170064be830aa2cf249e02b524d58a22462aea2c8546de079dd639b97dfb161f555db91632580a06b9d2c5a03cdbdd3514a4ee26d3261061126d94b5400addf155adaff421bdf00434dcf76c2e8f5e0f89a08fbe0f52690f8e8911e6a85046539fecdd7d5e3fa820fe44830920b26a973f67400dfbba06ce03241a565bf8f5a573772c58acdcfc3b87d573fdf899cf0612de0647676f43c412d9c19adbff0d99c8b3e435257942c16e67146a381628aa887818e03c4fe114d9664f523018ab57e0d952da1474ffcb83fb981d357b99cb", 0x1000}, {&(0x7f0000005700)="e8288d3362bf93358e7dc74be855e34d3cc2e17a3711ee8459cc93523074b79d4349c0a9c2d72757580af07946fa3a7a23bc3c2acb3ccd77a387bd26ca580124a3a4614efca7a8244d739d3ae2bdc0275b885e61d2aa6959eda2558dda344235", 0x60}, {&(0x7f0000005780)="cbb723bde484fde240ea280f873bd71c035780a47b00ea85db955c4aa095d27a67218481e56d34f54c4c8ade0571e960fa40cd32e4067f4f61db38ad5944664cf7b93460426dd67a7a80975788f19738387b9b9162ea80533d5aca0f18141f47738ac5911e5dc5", 0x67}, {&(0x7f0000005800)="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", 0x1000}, {&(0x7f0000006800)="e11fecbc9c8d035b50ea359ff5db1fb991fec60fc66f3761186caff92ec5d9c158a691e2ff07dc01e83168ae1d86d0a9b640643e4952be7f00764326ad5663f968b67670265c92bff03bfe6a6233f0b006b78db6c16a884bfb3be1ee1394bc87a86816d3dd94bc5ae8ed798b0502619ff45587cde6a22b50bb24ef", 0x7b}, {&(0x7f0000006880)="4d3d382ad08ce23dd5e05141886829869cfaee4f8ddc4bc21224314009ae663d1800597199cbde450ee306b7cc5068e92d097866d3d11ac702b5340e4a750436a99cd297f9dde8ac83efba4376e97f75b108f76163339bb4d69ee39a3ea6c0f25649510783319d018ab67a01480ac9889e64c5cb6aa107e914e2b1dfbe0911c28f572fcc1523daf7cb1d37b77cee6b75b47532475243af4a9654", 0x9a}], 0x7}}, {{&(0x7f00000069c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000007a80)=[{&(0x7f0000006a00)="347c896543d87e6ae59ae795c8ad816e483be2abe1b1dc30390ec7a9ff5e5c8a8fb0a603005eb26eacf3a0889d1f806cd10540f4d43105fef669899083efa9b4e280fa5273ef0972a926647f82638af290ed01df21c28f290cc5f27047550e9c93f334f756", 0x65}, {&(0x7f0000006a80)="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", 0x1000}], 0x2, &(0x7f0000007ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x85}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}], 0x78}}, {{&(0x7f0000007b40)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000007d80)=[{&(0x7f0000007b80)="077216480c0f83fb04c8ae977a820dc3dbc52f3768aea929238fc5d1802a463cd0d51fc633af1f51991d1bb9c9b25ca25ae78718eb8e3691bcb0eff7ef190a60ac958e949cb582ab31709bbfb87895de2cfeb54a4a7fff2bc3299fc90d1a9a9ad378c03fdc4fa142f5a0f08e6b3ec4a86b1f05f253f6c0d1fbbf0dc28784e6963e4a0a03f2aa5643477556354fb8757134652e7fbe62a2df359689e9a736f285bd4852f71d359854ba7d96f3d6a8e04a79e78429f620c0d36271f418d8eceba202a68807860f52f08bfa00", 0xcb}, {&(0x7f0000007c80)="05e2b3c58cda1f956091b5f860855d14f2783bdd2de84a69eda1a0d0f92b04678f9b88ba3f1af0d4581f1719ebf8560e625afc6b866d1f108359466ba0a80f4b4797df880df0914896bc743e6a139efccb8935882f199c3277c7210891b3ef64271cee1404616a8f456ea45ba00a75351272608dc3b74ae6e301952477fcd180f1878c4da358e30c8cc208f80318c581cd1120ed5475679a52efca083495d1321c8c7448f3b9dbea87919754d568e9abfee92af555f21f0ce64228b1719e8035cd", 0xc1}], 0x2, &(0x7f0000009c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x68}}], 0x5, 0x20000091) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000008500)='/dev/vga_arbiter\x00', 0x88400, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r10, 0xc00464c9, &(0x7f0000009e00)) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000070603030000000000000000000000000500010006000000080006"], 0x24}}, 0x0) 03:41:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d000005000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x6, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) 03:41:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x216}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x1}, &(0x7f0000000200)=0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x402000, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) 03:41:47 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x4d5) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r7], 0x24}}, 0x0) 03:41:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x6, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) [ 1595.390313] overlayfs: failed to resolve './file0': -2 [ 1595.400952] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e753950c703"], 0x15) r3 = dup(r2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x800000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}], [{@hash='hash'}], 0x6b}}) 03:41:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x6, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) 03:41:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:48 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) 03:41:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000000)=0x7a, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000070603030000000000000000000000000500010006000000080006"], 0x24}}, 0x0) 03:41:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000401"], 0x50}}, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x14, r3, 0xf20aaac1f6a2385f}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf25020000000c000400010000000800000014000400290c0000ff0000000500000002000000d7fc28d73ccf351524cd538f01ade2d07d08854597bbaaed8aa6e94629d8414e901015217cda60bedfa99501a4564cf0fee32200206803ebc293cb357cc711e0a417a8681e7a6e34196ccd5ed77919f1e6650679f6173ff46e969f12c6958bb832bd1a347bb738981249433706e76003cd429ebf69e1a415ecc676f0b03b05aff156cbd3dfd662805ead294df51a155e2304147942fa6a477d3002768e9f42115294c4dfdedd9ae354cc4d8048b1c9d2115529a5c819753c1ae91f70fbd6d53b640c25f4ca4b17464bcaa7f59beaf3bae1b83989f39721dffc2e8c5cae94700942c8c748e8e0624585b1b594ab92c8e68ca56d3c1f3e532cc42458142fd474b6bc96feef0216ffbe568c6e260cf602d4606bf49f17778f2f9f0ce129d0a258c7dcd5af00498a2b18182bda61fbaa66b3f5ef155600af6750f16f3fb84190854d1764f2bbad9f01f3"], 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0xc004010) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = signalfd(r4, &(0x7f0000000100)={[0x8000]}, 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000180)=""/201, &(0x7f0000000280)=0xc9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000005) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:41:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d00000500000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) [ 1596.313419] overlayfs: failed to resolve './file0': -2 [ 1596.345629] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r1) read$dsp(r3, &(0x7f0000000000)=""/192, 0xc0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) [ 1596.393611] audit: type=1804 audit(1597635708.617:939): pid=22564 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir163649684/syzkaller.eV5mnk/2223/cgroup.controllers" dev="sda1" ino=16176 res=1 [ 1596.434423] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 03:41:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) 03:41:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', 0x0}) 03:41:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', 0x0}) 03:41:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', 0x0}) 03:41:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:49 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @loopback}, 0x8000}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0xfffffff8, 0xfffffff7, 0x5], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x9, 0xfbfbfbfb}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7c, &(0x7f0000000000)={r5}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x80, @remote, 0x6}}, 0x3, 0x100, 0x1, 0xfff, 0x66, 0x2}, &(0x7f0000000440)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r5, 0x6}, &(0x7f0000000100)=0x8) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="f0e980f44526fdbc9193237268342755f78bf23d8d8cfd221dd28e2f6c9a9240c4fd3c3d1702337317e72ab9de815dba6542ddedde7ea46f617f3d5fe6a1ad3c27bed7f77277cd26c1d4f748b05cdbee97df750d3cd94aca"], 0x24}}, 0x40005) 03:41:49 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) init_module(&(0x7f0000000180)='\x00', 0x1, &(0x7f00000001c0)='ip6_vti0\x00') r2 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sched_setattr(r2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 03:41:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x6, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) 03:41:49 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d00000500000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x800) 03:41:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x6, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) [ 1597.148015] overlayfs: failed to resolve './file0': -2 03:41:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x24}}, 0x2000c000) 03:41:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x6, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) 03:41:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x501000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x3, 0x1, 0x56d, 0xe1, 0xb, "8c9114c9baa93a2abc7872dd162fb78e650c51"}) add_key$keyring(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000080) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 03:41:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x20}) ioctl$TUNSETOFFLOAD(r3, 0x800454d3, 0x742000) r6 = dup(r0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1c, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) splice(r5, &(0x7f0000000200)=0x20, 0xffffffffffffffff, &(0x7f0000000040)=0x40, 0x20, 0xa) r8 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) accept4$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80000) [ 1597.255426] overlayfs: failed to resolve './file1': -2 [ 1597.283934] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) 03:41:49 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8000) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x24}}, 0x0) 03:41:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:49 executing program 1: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/203) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001f0d0100268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140400000000000000786c616e0000000400028008000a0036459cdb260000000000000000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, @perf_config_ext={0x800, 0x3}, 0x800, 0x0, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a64d7c711ae7c879ada850e5a639e0909dd23d460ddf192302008c10673b2f2165cd884615c8b5586a1051a6c4580ba0d52a5dcc67c47d9819ff26d47407bef9b857819ce7b980f60020f04833d89ad4dfbc94c46dfbf3a3813176463d52bd25307830bb80d392763e23ad94b7c8b09c786c85e8abf1d10460b83c79eac1248831ec0ec42a38f784ba792a399f4a7cdb341394801f0da23f960912eb70e58a367075e500e5618820198f0af394732ed23acff0a276ef65f30d5973a9613b2f7fbec5836efcd0d7b9bf383567e804014555b9280d657bf08629209ddf1a9ee551227079cd88dd01b2be5490cca62980a8"], 0x9c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 1597.688501] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1597.796457] overlayfs: failed to resolve './file1': -2 03:41:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d00000500000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x8, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) 03:41:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0x4}}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x100000000011, 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xa6f0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004800}, 0x808) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000000)=0x2, 0x4) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f0000000340)=""/215) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d66642c7266e7c3a409f9aca5ade57800b10315be851fbd0683d61318bcc59fa2f029e0f83c83d712a71132407e14f28efb20d825fbde0ea7b2861fc88479a6e2343119797f820c068b4060bfd1182455abf16ce6c9e2221ff0e0967a75711656fb981e704c33d7752be8460eddcb4ea40f4260750adb6dfead1c95ff3fc4454031dcf81843", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c00f3a12c86ce40a567bae98b89e36a593f15bb2f17ed795fe5c485351ffd5d20e4acf844ad676907d191657cdcef2ff29673e569aaf8b5ea3cb27f617f43032ebd733d7506e63eacb7f9446901779d42764cc93c46d02860067eedceb7bd6269a345371161fbcad829751e469009fed2763bbf7a42fd590dda9dfd"]) 03:41:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000080)={0x86, "58951fa90bcbd65b7da1dd37a9b675bfac07026e6cdf60829b5f61f90b78a12d", 0x1000, 0x10000, 0x8, 0x0, 0x2}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000070603030000000000000000000000000500010006000000080006"], 0x24}}, 0x0) 03:41:50 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:50 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x48, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) [ 1598.145017] 9pnet: Insufficient options for proto=fd [ 1598.164823] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1598.214960] 9pnet: Insufficient options for proto=fd [ 1598.217288] overlayfs: failed to resolve './file1': -2 03:41:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000706030300000000c30000000000000005000100060000903000083c92b05c7488aafba7f462cfd1e6207c5d59b66e89eda1648e0cd760ca4e34ed"], 0x24}}, 0x0) 03:41:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7800, 0x4, 0xe646}}) 03:41:50 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x94}}, 0x0) 03:41:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7800, 0x4, 0xe646}}) [ 1598.338192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1598.366419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:50 executing program 1: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1fe) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xfffffffe) socketpair(0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1a0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x2, &(0x7f00000000c0)={{r5, r6/1000+10000}, {0x0, 0xea60}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0xfc, 0x0, 0xb, 0x0, 0x2c, 0x24230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x7, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0xb) fallocate(r0, 0x100000003, 0x0, 0x80019c) [ 1598.417147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1598.432458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1598.521119] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program [ 1598.550304] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program 03:41:51 executing program 2: pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r1, 0x0, r0, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(serpent-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000074c0)=[{0x0, 0x0, &(0x7f0000002500)}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'ipvlan1\x00', {}, 0xff}) 03:41:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4, 0xe646}}) 03:41:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85aaed85adf9cc0000001e00000065000000000000e19400"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 03:41:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:51 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xe646}}) 03:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) fchown(r1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @loopback}}) r5 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x62040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$MISDN_TIME_STAMP(r9, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 03:41:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) prctl$PR_SET_PDEATHSIG(0x1, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 03:41:51 executing program 4 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:51 executing program 1: r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x29, 0x0, 0xcd, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @multicast2}}}) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="d4f4ff54d3cc6eab8c338d"], 0xb, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000180)='./bus/file0\x00', 0x141142, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x4000, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file1\x00') [ 1599.149705] FAULT_INJECTION: forcing a failure. [ 1599.149705] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.161554] CPU: 1 PID: 22739 Comm: syz-executor.4 Not tainted 4.19.139-syzkaller #0 [ 1599.165450] overlayfs: failed to resolve './file1': -2 [ 1599.169453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.169460] Call Trace: [ 1599.169485] dump_stack+0x1fc/0x2fe [ 1599.169508] should_fail.cold+0xa/0x14 [ 1599.169532] ? setup_fault_attr+0x200/0x200 [ 1599.169551] ? check_preemption_disabled+0x41/0x280 [ 1599.169570] __should_failslab+0x115/0x180 [ 1599.169591] should_failslab+0x5/0xf [ 1599.211528] kmem_cache_alloc+0x3f/0x370 [ 1599.215605] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 1599.220718] dst_alloc+0x106/0x1a0 [ 1599.224281] ip6_dst_alloc+0x2e/0x100 [ 1599.228096] ip6_create_rt_rcu+0x235/0x510 [ 1599.232350] ? ip6_dst_alloc+0x100/0x100 [ 1599.237467] ip6_pol_route_lookup+0x9fe/0xe10 [ 1599.241962] ? fib6_multipath_select+0x2c0/0x2c0 [ 1599.246714] ? __mutex_unlock_slowpath+0xea/0x610 [ 1599.251562] ? wait_for_completion_io+0x10/0x10 [ 1599.256244] fib6_rule_lookup+0x22d/0x4e0 [ 1599.260403] ? fib6_multipath_select+0x2c0/0x2c0 [ 1599.265168] ? fib6_lookup+0x300/0x300 [ 1599.269065] ? dyntick_save_progress_counter+0xd0/0xd0 [ 1599.274355] ? sync_rcu_exp_select_cpus+0x820/0x820 [ 1599.279384] ? avc_has_extended_perms+0xea0/0xea0 [ 1599.284239] ? wait_woken+0x250/0x250 [ 1599.288052] ? mark_held_locks+0xf0/0xf0 [ 1599.292128] rt6_lookup+0x15f/0x220 [ 1599.295769] ? ip6_pkt_prohibit_out+0x170/0x170 [ 1599.300438] ? __ipv6_addr_type+0x20d/0x330 [ 1599.304749] vti6_link_config+0x322/0x610 [ 1599.308895] vti6_update+0x53e/0x770 [ 1599.312608] vti6_ioctl+0xa2b/0xb3e [ 1599.316234] ? vti6_rcv+0x910/0x910 [ 1599.319860] ? lock_acquire+0x170/0x3c0 [ 1599.323852] ? dev_ioctl+0x26b/0xc4c [ 1599.327603] ? full_name_hash+0xb5/0xf0 [ 1599.331581] ? vti6_rcv+0x910/0x910 [ 1599.335219] dev_ifsioc+0x256/0x8c0 [ 1599.338893] ? dev_load+0x200/0x200 [ 1599.342518] ? check_preemption_disabled+0x41/0x280 [ 1599.347541] dev_ioctl+0x279/0xc4c [ 1599.351073] ? _copy_from_user+0xd2/0x130 [ 1599.355224] sock_ioctl+0x448/0x5d0 [ 1599.358897] ? dlci_ioctl_set+0x30/0x30 [ 1599.362869] ? dlci_ioctl_set+0x30/0x30 [ 1599.366841] do_vfs_ioctl+0xcdb/0x12e0 [ 1599.370727] ? selinux_file_ioctl+0x506/0x6c0 [ 1599.375224] ? ioctl_preallocate+0x200/0x200 [ 1599.379634] ? selinux_inode_link+0x20/0x20 [ 1599.383984] ? __fget+0x356/0x510 [ 1599.387445] ? do_dup2+0x450/0x450 [ 1599.390982] ? vfs_write+0x393/0x540 [ 1599.394689] ksys_ioctl+0x9b/0xc0 [ 1599.398132] __x64_sys_ioctl+0x6f/0xb0 [ 1599.402025] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1599.406615] do_syscall_64+0xf9/0x620 [ 1599.410413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1599.415586] RIP: 0033:0x45d239 [ 1599.418772] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1599.437758] RSP: 002b:00007f59035d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.445462] RAX: ffffffffffffffda RBX: 000000000001dfc0 RCX: 000000000045d239 [ 1599.453071] RDX: 0000000020000400 RSI: 00000000000089f3 RDI: 0000000000000005 [ 1599.460395] RBP: 00007f59035d3ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1599.467651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.474911] R13: 00007ffeb42316ef R14: 00007f59035d49c0 R15: 000000000118cf4c 03:41:51 executing program 2: pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r1, 0x0, r0, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:51 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:51 executing program 4 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:51 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:52 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1599.813411] overlayfs: failed to resolve './file1': -2 03:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:52 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1599.905732] overlayfs: failed to resolve './file1': -2 03:41:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200800, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000080)={0x38, 0x7, 0x62d, 0x6, 0x1}) 03:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x4b47, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1599.969931] overlayfs: failed to resolve './file1': -2 03:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x4b49, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1600.090481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1600.114371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1600.179868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1600.186868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:41:52 executing program 2: pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r1, 0x0, r0, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x541b, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:52 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:52 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:52 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0401d8657488bc866b00"/21], 0x15, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:41:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040)=0x3ff, 0x4) sendmmsg$inet(r0, &(0x7f00000044c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}], 0x1, 0x0) 03:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x5421, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x5450, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:53 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:53 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x5451, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:53 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1600.861228] overlayfs: failed to resolve './file1': -2 03:41:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, 0x0, 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x5452, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:53 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:53 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff67}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:41:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x5460, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1601.589990] overlayfs: failed to resolve './file1': -2 [ 1601.592797] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 1601.647799] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 1601.680657] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 03:41:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8910, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1601.711624] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 1601.741174] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 03:41:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8911, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1601.794939] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 1601.806048] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 1601.833796] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 1601.862354] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 [ 1601.882956] kvm [22842]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x187 data 0x1 03:41:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8913, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:54 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x41c1, 0x3c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x7, 0x0, 0x20, 0x5, 0x7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f00000000c0)={@multicast1, @remote, @local}, &(0x7f0000000140)=0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003904844000"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYRES32=r3, @ANYBLOB="0465e17a5abcac1fe1971ca700"], 0x38}}, 0x0) 03:41:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8914, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) dup2(r4, r0) [ 1602.095756] device syztnl2 entered promiscuous mode 03:41:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, 0x0, 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:54 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x891d, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) dup2(r4, r0) 03:41:54 executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1602.494311] overlayfs: failed to resolve './file1': -2 03:41:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x891e, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) dup2(r4, r0) 03:41:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x891f, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8920, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:55 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x9fdb1da2d9477a5a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r1, 0x2008001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 03:41:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8921, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8922, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1603.098269] syztnl2: mtu greater than device maximum [ 1603.113825] syztnl2: mtu greater than device maximum 03:41:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, 0x0, 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:41:55 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8923, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:55 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1603.654377] €: renamed from syztnl2 [ 1603.720113] overlayfs: failed to resolve './file1': -2 03:41:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8924, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:56 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000424000/0x1000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000006c0)='smaps_rollup\x00') read$alg(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:41:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8927, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:56 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:56 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x0) [ 1604.124138] overlayfs: failed to resolve './file1': -2 03:41:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8929, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:56 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1604.226255] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:41:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8930, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1604.439428] overlayfs: failed to resolve './file0': -2 03:41:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8931, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8932, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = mmap$binder(&(0x7f000054c000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xd0, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x7, 0x2, 0x39}, @flat=@weak_handle={0x77682a85, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0xb, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/169, 0xa9, 0x2, 0x37}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}, @release={0x40046306, 0x2}, @register_looper, @increfs={0x40046304, 0x2}, @dead_binder_done], 0x2d, 0x0, &(0x7f0000000440)="697ad66701a2dfba431c73390dbe196c03550c4f016fe325f23ba9396f8256ce5d833dd259d98b02e49ae10ca0"}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "ffffffffffffffff", '\x00', "20040100", "ac5127d800"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000540)={0x2b, 0x8, [], [@calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x6, [0x101, 0x81, 0x7, 0x7, 0xfc00000000, 0x8]}}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x3}]}, 0x50) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 03:41:57 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8933, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1605.022858] overlayfs: failed to resolve './file1': -2 03:41:57 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90692, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 03:41:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 03:41:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8937, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:57 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1605.633160] overlayfs: failed to resolve './file0': -2 [ 1605.663521] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:41:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8942, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'gre0\x00', 0x3ff}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, @private0, @local}}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x7) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC=r6], 0x3c}}, 0x20000010) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="4ad5ad658d8612c62400000034d08bf49fc972d31667cf3a5b4f02c39565e4ccd04f878e2359fe347f2af534f3dad8bb1442c7b5ae58f0bd640936abdf685df28afaf19500cf42add3921f72d50ca3c10ed1dd84ef768a8109df5797beba1485db342484a8eee6d0cc681566da054a665f2817ede90b40707361f35ee5af85000000000000dc499551507f91a31b5600000067ab0ec030686e033db5e47889f33e6a307666b369c4b73ee2650b1d5ef37489da5b094312e68c0e110f4d9c5bf840ef4988a0f176f223a70be2453e8bb1e66f586029c1e942d49d3b2f396d37979e85fdfbb8e5427f41f801a8f19fb6324e1cee0a02810ce34c1ca3c1045d6853b8d8819bd0fcbc47facd3dc5c66cd9220f5cf223186ec9e036b5fd25b16ed91129223aa94819e23906105b5e028fcb222f89c249aa21a0d4fb682051a74da64adc9de65de325265498e8c9a417762fac1168b73a86cc1209015eeb683af2aeee869630c6fd6f42a398a4d7761666704ebac718bb04266c1bb418a760a7ebcd204e7fd845b08fa13706490aff0ec2a9afa34ce647ce941314d8b89698d08322556a6fc2722000000000000010bf3832747c791d2213d22431c8e18dd7616c984da1c39d76639799d2804562b4bbb738daf2f8", @ANYRES16=r6, @ANYBLOB="a570914fe67462c96f7bfd4197b433304a540c933b6b629d5a26ceed72554cd139d724aeddf589c850a685247371a78ae72f0654b57454af969c3dc4e2a3f0b4b0ea5a2752d1053a56ea0bfa2b18ffd5f60f039e5c4b552fb3b24768a39bb735b875bca3cf4d6f39b9199020c452b8e93d0bfc79b6121b474abac6d0"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x16c4, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x40400c4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RESET(r3, 0x5514) 03:41:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) exit_group(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x4}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @empty, 0x0, 0xffffff00, 'tunl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x12}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff}}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, 'team0\x00', 'bond_slave_1\x00', {0x29c07b05333eb146}, {}, 0x5e, 0x0, 0x72}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff, 0xffffffff, 'syzkaller1\x00', 'batadv0\x00', {}, {}, 0x88, 0x1, 0x1}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}, 0x1}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x1, 0x3, [0x1b, 0x12, 0x26, 0x8, 0x39, 0x2, 0x27, 0x1c, 0x25, 0x1, 0x8, 0x27, 0x17, 0x1, 0x39, 0x36], 0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r3}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa12, {{0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {0x2, 0x0, 0xfff7fdc0, @loopback}, r2}}, 0x48) 03:41:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8943, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1605.920003] binder: 23091:23091 ioctl 660c 0 returned -22 03:41:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) writev(r0, &(0x7f0000003580), 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) [ 1606.038494] binder: 23089:23099 ioctl 660c 0 returned -22 03:41:58 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:58 executing program 3: get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0xa11, &(0x7f0000ffc000/0x1000)=nil, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$midi(r1, &(0x7f0000002040)=""/4097, 0x1001) getxattr(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="73937374866d2e2f70726f632f7379732f6e65742f697076342f76732f64726f705f656e74726800"], &(0x7f0000001200)=""/4, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f0000001340)=0x96c, 0x4) getpeername$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @rose, @rose, @bcast, @bcast, @default, @rose, @bcast]}, &(0x7f0000000080)=0x48) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLOCK(r3, &(0x7f0000001380)={0x8, 0x35, 0x1, 0x2}, 0x8) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x4}, 0x1c) write$UHID_INPUT(r1, &(0x7f0000000140)={0x8, {"6e854ed14aa508c200927eb1f20852a1d3e4045146254092cf234d2b3b8ff0ee90c8a089e692aa1039997647e86c4ec109561c876d85ac124ac8f3790d9b67967467d2c02700bf9ee6856ed0be564ea3f6260feb0ffadf358f5a7c66be7d47a81012bf903c6c58755fc7c998030fb1c606c19f09a396b51f55479749d37f2a7ce6fbb073adff3ab22632faea9667d59781f2b71155ec9c215e3e8453e4ec04e20b491935f754d61fff6c1329b69807314fb4abd1b082697c39992222416d4b9fe6bad2a706011dea41371177689912e53ce46fa140adec28b01116e28cd02e80aa546608c74a853dd8dba05f4fe6de85816348d889ffe9f11620dcb71ba1c09709b98612df39382abd48126c511b2c7598c11f5a076cd6bfcd532a7a4e7d41e1f01701829db23c50d42dfef1dc28026b4d19b49a22658175f6e4cb0c9af8a90d4e0cd6d6c8001760ea6c0d254d3a185e38b5ea04ebd2eb579549956fbd8384e6b76e20fffa650233fb77f929a6892f560212aad387d72001cc91fabbab1a01bf62194c75871056f1258136586691545ac7361df3c03d760cf4c354f6104ac1528bff39bbf337d1ae1b5d274705293e67673a0a7f91b61f3a2ac7b193b958a034123d26548348e5fc7e9a7058b21be3874b1f44bcb1ea89bc70e681416fa71ce247cec0288916153c152144878ffb1818e198e66489397c8ef67a50b92dbe579749d5c45ecd73045bfb66efe843edada6b68e626132a5738cb85cc5f383559ec9385315dc1a49f40949f47ffd9b5714801aa951bc0148d03fb02d9988d99fb9b53afd808bea6d42fa1385ca67cb420b93cacc4f3aa7cfee57754ac702ae1dbf86e4868735aaf394ebe914fa87780f2557cbbbbf67253bf8d25748a334b99677bf1ea39b906532e75a9b42d9e228f9db0a157ea0bafa3323a1b919fa44f3cd28c9c19af744f480db5d916293134d5fedb7799aea49b6d36d610998c4e5c44dd14e7a26cb46ece92b7e01f460b5a26b1ea7f5b147caea39673b4415e343d7dc98c982fb92f1bcec9db0ee6ad118a9453f9ed4ffdf15152538737a9974287493de2361fbceddb95f597bfb0aa3065235efa74bf5a775e136f03ef41d8830558e8d9461883668624f90b4c4c9d42e8d953bdbaea7f456890672a41a60d60ccecad8bed581b118078786a81a518ce86fb7243b1883d60a8ad45f591af03ce5098bda144c51de2f73e0f9aca088b7191edb92574803e08ea181b3613f138f4805b9f1166fcc3d5d19618bccff553a7f5dbc02c5d9d33dbef5e6a8dd3f674f74dbd1062a16eb5469bb12930d0dc73e487e0c2c607fac9fe217dfd771a626d25197d146a4259a9ae5aeb80768d802c26a6ff4a3d36025fa521d0cebf810fcaf0bd0a42b81c04227cedb412b8dbd7b6e49d52c366000a0ef532e33f891734361e2626a98cb9e0ebad34de6d354d0a1e17a51b3fb455e6b7b5f93d89a8343ac9e5c5ff26902e472492abdc7336ed864753a4c3916d9b3a545e853ec0c019b450a43d5aa7783a96fd07d6d9e4387c65ee76608e6e2ba56bbe63b5183167d226a0bbaa6c64e6e10dde2a37d8f2f5abf09d880d3b63290a3afb210d4e76db109667c3a6fbda5cbaa5de0fbd8958afd56bf112ba0193a0cbfc0893fa6eaa03cf998de141f16713cc35a5f272c38e1bc6309ce1ab7e665d1f66626fc38aa690958d5caed663d9210e706e24ad6abcac186a0ae4b61bc291160e501bf20a78a5eb17c367b01e6b4c276fcb55f850567873be9ded704acae410061fc2102fee2e5a6b7bf6117fdf5f8faf8e5e3d40a9089f40756ae414f221166895870a7ba48dcec9587a6c72201766c29b26748bf569c77a36241c87d995fb42c3d336325027784bca84d17e40399d4459702d4f09cfa6b6c5db48914494c838884e6a3a511bd213b875cf9e60a44b625999f9baaff1187c5715def966d9a63b752c3da6dce2477483a2d0f614a9319da181560659b317add9409d0ab9853729fb36a024a3aa55d2dcbe0f579d80f8e71d890c72d92bb8e86804dcc43518abf9964eafb8b91fbaca0efd8a691fbb223d5959add32560a910feee9c8f895da14c79483cb890d09d515e9b30452d398de9e421b21ac7389b4ecfb943703ac8e96b3baab462de2a6ee8a5ebaa90bd6c42d54cab834960ceface5003d6d445e74a59adbfcc2ab7c37b0c659ed7f88f447ab006e0728ae2320dfaffff69b6bf5629b667cd07434b7679827af32e5f3ff5aa1dbfa19758fb2bff2f2067d794d440339c499c535cc82103dcd4fc01e21dfe75b3d5cd1cd77fae25f03b5d80ff52c68b031842d78352e42be2622d1505999520dace2108b0ddca689ed838667253afe385fc36b016c663777852169b4482e41c2431d200945d201044593d4c6d8332fcb74ac2a14ddaab426994127141bb26267a23de27a2be651058420c28ed8219f61d6e56a814ae35f700d4a5da66dc44038f5c36d19568763c8e74089cd3f5f925867dde905c2e86d2292001baaa83f6fe8f5dbe6e428ea46b0bda515a10eddcd2b535103629e9f64c477d2667b0054457a87e4b1a88d6d02d75f11baaaa899542dadc08faeb20dd49c162a01dd502d6c5f51c601d5dcbbf25176ffb4de9334ffbb9efdfd1757745977b2531e7a6e463ffc1ea76dd0c6567618947b910f40334571b4ae038b1554e777e6a97dfb116b99926399cceccfd1a6e62067ea4feab84d7e4be046358d856062313a9a6b6abe0e44cf61975c9e67d2a3d539aa7dfe95b1ca4729c0c61b02f33c8ba18dbbd11cea54641447d513ee327998f631be81b5151ab966175048505e9940b22f23d96b3b7a79eb46cf1d7c5d3d04171b083ec136dfec5fc5b853fbe49094c73602a54fed0331f8a416977e76f4a2e0cc5efc33ff094ce0d772752496e69f954ba79dc000a3c0ee2e35b8a83174b3609a5f10db690d0f0ab03bb6974318c113160d7d4178f26fc8e23b223cc1c198aa620489dec41f19fc0d2fb882aa7daf31a8c0b5586154865631942347213e78efc162d8e2ebdad71b6a194dfd073d7181fb190488de46dfbbd7b1ae36339677dd45e8f17406000e330d00a33669cd96534cde4e445928796455d5e84d775269afb4e8af6ef7d3dd959764dfaea59ff39558cb5de6f1ef2619f638c0fd62f6f264b182e739cd1cd8928d7c0356ad589b69478a57d3c3c2fdcaf1252ceed94b1dc719545dd7a49a3de5edb23654f3e35e6dcc63377f837afd0d690a8a54002924688e0e36d41a61b05c0c81c04ca41035caf4e7105f9aa2462e5a0358c62a1b06612323c93c21d7882a6f791918183ebe1106072350145ed07c2306c219602a594be0566c0f9ae0d058cda5248f5e53c2b3540b44f8c6bafb00e13519fe336722c5d2b69d8383b5a689b8d034880c9810df6bc2b71e5c72bf89c3f88750d5664f2b2ba4b359b58c076f6989be83d249c178ba95165dd357c70f09e9bc9688e0cd4a31e0124dfff725767cad4941c429a68729222eef6a167b4b665dbb55c6391b84a599fea357a59d2aa50b8ca87548a06f60c2ee81cb30b5a57e5c4ea93dcdc086b83242a5520fa343ff7eaa8c510b86b83284126c1b74fcd5428b1a08f8c81d08ebcaf9e84acba3bed3840d7d918bcbb1235f2b21287f76f7311f70f3c53c076788769d267954085e7fa353b6606acd3685fd8f04b79bc2cefa8df577551d55da1a45c85a3000be95347702a7aaf4f18f4e86a55913ccd8746e65239a8401348f12513e4401139ad3735659afe4d2fc6e6c6f779e2644a3d4bf707865fcbff9ab3e7b9e202b6b7d6fc5798fca68967a6538a8e52b4c2554eaaa8cc67f456bf4237d4473da7ded54d43ec16c66143811760ae73874a2864d570ba0f56a803d1968e902051ac94231e664b45bc39337bb169ea922ddea376074db5442c03eed26e5585137f482da63c3a52293b777d3200c6406769ccdcb73f919e8cb22dfbaba3aa0e2f20a40f90a933a213abfa8eb5e76d349b0ead871e49af694826f7483f07d330b99f83d0112037434751d4c61a54ef1e04a61e9761ef983ab912d027d31e78be3d4349ff480b08130e2e85ab38a213e51c44cd42d0d27a0bfcc02d1ce5d7f9d845ac0bbc328e4f62fb1c7abbacb287723b0d8e64841f5d6cb1d84caeb34209135ac9876af6e134dd98991a3bbd0ffb262ccb27ffbe8a1768893eff4c2e15abba5b87f0b1c7e228fcf1b25d3071f482ec13d3a9479ee350a57bf9fcd36fde42ca86abc29480f06273f280103911c842aa020618d88cbf5deeb04302ae263e6bb5103d769f1a6cafe9ad7150aff66e17b6faf0a4c49e96dad62b91b97441e52ed77547693f341efa66329904b8541e45dcfd15c20bb4471f1f67601f9c3700310d1ec078f759b89a6833cf8b814f3503f218d6529f2a69060c2deb2eb0ce85e8034859c708cba1e782d37e3398835646b9e50f0a89bcac23c9b39dab178bb76ec373a0f1778ebe1acad3c5d8e9c8081dfc9a5834032bb590367237704b221549f14492a2deea7c0982a827dee9822ba1d213a6433387e69a04250deaef995ea447bbdfdb23e911d18792f3ee4e6512fe161fecc4be491ed87b36aa0260896319a6c063e4d2f4c618c6407a472caa46a54a4479100cd1dcf76a0a424c1fc3c5b00c8c14bcd0af8916e6db56dc7a4479c8fa07c4ffdbedc5156c51a1c80fe22e325ef4a2df8a11e282e19c8cd53a9ba293a26ebf7fde14a4d8f9bceaacd65ed2ae762ea9b9f52a1a8254db90a39b4da0ead32afd63ff0ea77dde8437be5defa4ca277160f3f8db64cb2f37a55860c194c64f7d05367e485d306434f179ef4c3d6465da890e9b32f05e3765be1c60fee8fbf9c221280fc12e2752e1cb0e07f19b48d78c2e3845235308e79856fd9aa001235e97632a04ce72a6c2a5884fb207fad9df255d959b4e9009a832bab92391bd33c09c7912ac06531dce47b000d4165efb43c21ba8f73c8871c397b155af2300d554b45ec878f24222da9e8d290a7ea36a0003cbd416fe06aa9003148e091fceebdcc7b4047b6ac6f19025caa2fa9ff03414820886b7be06c2072eaee249f4751a56229dfa6e7d72880eeb99603518ee7d2a5e2153f0de8728cb89cd13be9ea18cb08c477246b477f93297ee3ec9c9b9560b00a19c8e6bae811b5fd4e7b4cc076bb5282635829fa63ae6b0f119aa45e06c3b96e6446a9d42b3630d49b9cdfd820a617bac94c2d2421fb5a7754a43712fe61aca4b1871b86b865b226d4c5d4d059d61addebd52be296f26c2c707bc1088147ba85e7bf5b6a5f58a40d910d3184eb4beee2fe742376259cd35ddc234eb0070a7619df0916a112de18420a9d8dc245b85ac062ec4bcdccef3fb07fc77b47cf229f7572da2e4fbc4db026d76ab3610857da6470f6bfd881adf9dee042757c41697ac92d7ed8d3c5e84840409080d9e06540146b6cfc68681f8a1210f6bad1e1bdaba1760ef348638d87932c61a8bbe28b1936e2e25cdc5f1231dd5ece7744eae18c5492821cfcb6ed4997458734382a35dcff07d7a53711ad2cd27e4c9e30e565067f7a047751287c773863bb55cd992cafb06b4591f663c704dba2018a0ac08290b3591cedd54a6eb464b0097e46c0311083e4a2729264a1a92e0cb3c02072d1ec291d788b7795896cc2b27d950e6d79170dedcb442e71a3a8bbab85d007cb48f47fcbb1a4285a9bf7b524eb12dd70a42c8999dc1cf81740fac92289b7414fbd7a3d44b4227b5b4674af8a29c78e7cb998d216be", 0x1000}}, 0x1006) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000001280)={0x16, 0x98, 0xfa00, {&(0x7f0000001240), 0x3, r5, 0x30, 0x1, @in={0x2, 0x4e24, @broadcast}}}, 0xa0) 03:41:58 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 03:41:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 03:41:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8946, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1606.415834] overlayfs: failed to resolve './file0': -2 03:41:58 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) syz_genetlink_get_family_id$devlink(0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2e) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0x6, 0x21a, {r4}, {0xee01}, 0x100000, 0x80}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r5, 0x400000000000, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getpid() write$P9_RREADLINK(r6, &(0x7f0000000340)=ANY=[], 0x7b) sendfile(r6, r6, &(0x7f0000000240), 0x7ffd) [ 1606.505473] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:41:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8947, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:58 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:58 executing program 1: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet6_dccp(0xa, 0x6, 0x0) pipe(&(0x7f0000000100)) socket(0x2, 0xa, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="8000000010000304000000000000000700000000", @ANYRES32=0x0, @ANYBLOB="ffffa888000000005000128009000100766c616e000000004000028006000100000c00000c0002000e0000000a000000280003800c000100d90f0000010000800c00010008000000ad0000000d00010002000000ffffffff08000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x80}}, 0x0) socket$inet(0x2, 0x1, 0x8d1) 03:41:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8948, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:59 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6) r1 = getpgid(0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x200, 0x70bd29, 0x25dfdbfb, {0x10, 0x0, 0x0, r1, 0x58, 0x80000001, 0x4, 0x3, 0x0, 0xe1bd}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4040015}, 0x20000040) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)={0x139a, 0x1ff, 0x7, 0x6fbe, 0x2, [{0x2, 0x6, 0x1, [], 0x108}, {0x0, 0xffffffff, 0x8, [], 0x400}]}) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000200)=0x9d) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000280)={'veth0_vlan\x00', @ifru_mtu=0x4}}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x9b, 0x10c, 0x3, 0x6, 0x0, 0xffff, 0x400, 0x0}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x3, 0x1, 0x1, 0x7ff, 0x200, 0x8001, 0x3, 0x60e, r3}, 0x20) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000003c0)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.stat\x00', 0x0, 0x0) write$selinux_attr(r5, &(0x7f0000000440)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000480)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000004c0)) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x9]}, 0x8) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f0000000540)) r8 = dup(r7) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x9000001}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x263}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x84) 03:41:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8949, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:59 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000003c0)={0x0, @generic={0x29, "df9cad8caadcca1f2c313a709014"}, @phonet={0x23, 0x0, 0x9, 0x15}, @qipcrtr={0x2a, 0xffffffff, 0x4001}, 0xfffa, 0x0, 0x0, 0x0, 0x382e, 0x0, 0x4, 0x4, 0xd3a}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104030104000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r8}}, 0x20}}, 0x0) 03:41:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x894a, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:41:59 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:59 executing program 2 (fault-call:4 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) [ 1607.324625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1607.383674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:41:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:41:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8970, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1607.434908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1607.460818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1607.465657] FAULT_INJECTION: forcing a failure. [ 1607.465657] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.479716] overlayfs: missing 'lowerdir' 03:41:59 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000000b00)=""/102400, &(0x7f0000000000)=0x19000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7c, &(0x7f0000000000)={r4}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="f400000040eae73020fe03d8dd8671e7e173dd7a7ef0dd064db749e053209632060848f63187699e9e093573e3afdf82cd5f23f450acdab3e3d32e3fe257ffc6d3fd24b01e174155e7d3f47a21ad53b93ca128c882befcede88c0f7ac30d4d12f2c5672c3ba9c9706ac76492fefdd12534ec040e634b759f1c00cd9099874e02bf773df1e7ce87b5d1285d34eb7d7e64813b8e5af4c3d4ed911e7e2e7927d4cd7cc5d148a99bbed1b4d9c6f54610e600a0abf76437a1ad27a58a7447f63089db014361328f40d3dfb4d9d07d4f1704ddfa98a8092297b2028c146880dcfac54c02497f744a1ad23174842c49057357492e1d0a5e"], &(0x7f0000000100)=0xfc) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x10001) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000480)) sendfile(r6, r5, 0x0, 0x1c01) r7 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r7) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f00000001c0)={{0x1, 0x6, 0x9, 0x2, 'syz1\x00', 0x100}, 0x1, 0x10, 0x0, r7, 0x5, 0x7fff, 'syz0\x00', &(0x7f00000000c0)=['/dev/audio\x00', 'pagemap\x00', 'pagemap\x00', '/dev/audio\x00', 'pagemap\x00'], 0x2e, [], [0xd43c, 0x2, 0x9, 0x1ff]}) [ 1607.529120] CPU: 1 PID: 23221 Comm: syz-executor.2 Not tainted 4.19.139-syzkaller #0 [ 1607.537042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.546401] Call Trace: [ 1607.549007] dump_stack+0x1fc/0x2fe [ 1607.552652] should_fail.cold+0xa/0x14 [ 1607.556550] ? setup_fault_attr+0x200/0x200 [ 1607.560882] ? lock_acquire+0x170/0x3c0 [ 1607.564870] __should_failslab+0x115/0x180 [ 1607.569114] should_failslab+0x5/0xf [ 1607.572839] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1607.577958] __get_vm_area_node+0x128/0x3a0 [ 1607.582290] ? netlink_sendmsg+0x483/0xc40 [ 1607.586532] vmalloc+0xe6/0x1a0 [ 1607.589818] ? netlink_sendmsg+0x483/0xc40 [ 1607.594060] netlink_sendmsg+0x483/0xc40 [ 1607.598134] ? nlmsg_notify+0x1a0/0x1a0 [ 1607.602124] ? nlmsg_notify+0x1a0/0x1a0 [ 1607.606106] sock_sendmsg+0xc3/0x120 [ 1607.609826] sock_no_sendpage+0xf5/0x140 [ 1607.613892] ? __sk_mem_schedule+0xd0/0xd0 [ 1607.618143] ? pipe_wait+0x15a/0x1e0 [ 1607.621866] ? __sk_mem_schedule+0xd0/0xd0 [ 1607.626107] sock_sendpage+0xdf/0x140 [ 1607.629922] pipe_to_sendpage+0x268/0x330 [ 1607.634076] ? sockfs_setattr+0x160/0x160 [ 1607.638233] ? direct_splice_actor+0x160/0x160 [ 1607.642828] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1607.648208] __splice_from_pipe+0x389/0x800 [ 1607.652544] ? direct_splice_actor+0x160/0x160 [ 1607.657142] generic_splice_sendpage+0xd4/0x140 [ 1607.661826] ? __splice_from_pipe+0x800/0x800 [ 1607.666343] ? security_file_permission+0x1c0/0x220 [ 1607.671378] ? __splice_from_pipe+0x800/0x800 [ 1607.675881] __se_sys_splice+0xfe7/0x16d0 03:41:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1607.680043] ? ksys_write+0x1c8/0x2a0 [ 1607.683853] ? __se_sys_tee+0xb90/0xb90 [ 1607.687836] ? posix_timer_fn+0x3d0/0x3d0 [ 1607.691993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1607.696754] ? trace_hardirqs_off_caller+0x69/0x210 [ 1607.701777] ? do_syscall_64+0x21/0x620 [ 1607.705767] do_syscall_64+0xf9/0x620 [ 1607.709583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1607.714776] RIP: 0033:0x45d239 03:41:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8971, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1607.717980] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1607.736890] RSP: 002b:00007f84ef68fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1607.744611] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045d239 [ 1607.751893] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 1607.759172] RBP: 00007f84ef68fca0 R08: 000000400020064d R09: 0000000000000000 [ 1607.766456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 03:42:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x7, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)="3f44c271433b4f6491b7a9a997a6a7f99131e5c82c5884cc6eb39a6e2d023748b5ff6242803a11110f4ae73dbf4f096af47e0780ccbd447213ad5e11d7626e9258b5a8b462c75f4d19bfe6b89233b3e4882867a9bb3f4023f74b27bcce8d76bf9de0538217bad038ca247131ccbc805c5874e918b4316c4ced0b744b77cd5e72c010746dac4d303e97396b184a2b0def0dff2d56573ecd1b783be1a07a7f73d29883f1072ac2888ed249f1ddd38f55bb1235c5cbba4540b9edde5c356c4973ac8bbbec977320bead6551b19aaaeaea983384a071d1d53152316636311dc5ec6ce8a7") r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xfffffffd}, 0x10}, 0x78) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) 03:42:00 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1607.773743] R13: 00007fff642aafff R14: 00007f84ef6909c0 R15: 000000000118cf4c 03:42:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8990, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:00 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xeb1}}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1608.100708] syz-executor.2: vmalloc: allocation failure: 4416 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 1608.111605] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1608.117409] CPU: 1 PID: 23221 Comm: syz-executor.2 Not tainted 4.19.139-syzkaller #0 [ 1608.125300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.134660] Call Trace: [ 1608.137263] dump_stack+0x1fc/0x2fe [ 1608.140909] warn_alloc.cold+0x7b/0x18f [ 1608.144900] ? zone_watermark_ok_safe+0x260/0x260 [ 1608.149771] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 1608.155094] ? __get_vm_area_node+0x2e2/0x3a0 [ 1608.159604] ? netlink_sendmsg+0x483/0xc40 [ 1608.163850] vmalloc+0x15c/0x1a0 [ 1608.167230] netlink_sendmsg+0x483/0xc40 [ 1608.171303] ? nlmsg_notify+0x1a0/0x1a0 [ 1608.175297] ? nlmsg_notify+0x1a0/0x1a0 [ 1608.179288] sock_sendmsg+0xc3/0x120 [ 1608.183015] sock_no_sendpage+0xf5/0x140 [ 1608.187086] ? __sk_mem_schedule+0xd0/0xd0 [ 1608.191342] ? pipe_wait+0x15a/0x1e0 [ 1608.195069] ? __sk_mem_schedule+0xd0/0xd0 03:42:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8992, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1608.199317] sock_sendpage+0xdf/0x140 [ 1608.203128] pipe_to_sendpage+0x268/0x330 [ 1608.207285] ? sockfs_setattr+0x160/0x160 [ 1608.211447] ? direct_splice_actor+0x160/0x160 [ 1608.216041] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1608.221462] __splice_from_pipe+0x389/0x800 [ 1608.225801] ? direct_splice_actor+0x160/0x160 [ 1608.230408] generic_splice_sendpage+0xd4/0x140 [ 1608.235088] ? __splice_from_pipe+0x800/0x800 [ 1608.239605] ? security_file_permission+0x1c0/0x220 [ 1608.244638] ? __splice_from_pipe+0x800/0x800 [ 1608.249141] __se_sys_splice+0xfe7/0x16d0 [ 1608.253309] ? ksys_write+0x1c8/0x2a0 [ 1608.257123] ? __se_sys_tee+0xb90/0xb90 [ 1608.261103] ? posix_timer_fn+0x3d0/0x3d0 [ 1608.265260] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1608.270029] ? trace_hardirqs_off_caller+0x69/0x210 [ 1608.275059] ? do_syscall_64+0x21/0x620 [ 1608.279044] do_syscall_64+0xf9/0x620 [ 1608.282859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1608.288050] RIP: 0033:0x45d239 [ 1608.291249] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1608.310250] RSP: 002b:00007f84ef68fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1608.317971] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045d239 [ 1608.325249] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 1608.332527] RBP: 00007f84ef68fca0 R08: 000000400020064d R09: 0000000000000000 [ 1608.339813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1608.347092] R13: 00007fff642aafff R14: 00007f84ef6909c0 R15: 000000000118cf4c 03:42:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8993, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1608.393299] Mem-Info: [ 1608.396076] active_anon:222803 inactive_anon:74777 isolated_anon:0 [ 1608.396076] active_file:30229 inactive_file:56546 isolated_file:0 [ 1608.396076] unevictable:7170 dirty:49 writeback:0 unstable:0 [ 1608.396076] slab_reclaimable:20511 slab_unreclaimable:143525 [ 1608.396076] mapped:62357 shmem:6871 pagetables:8780 bounce:0 [ 1608.396076] free:884491 free_pcp:1192 free_cma:0 [ 1608.434092] Node 0 active_anon:887232kB inactive_anon:236336kB active_file:114160kB inactive_file:225808kB unevictable:28680kB isolated(anon):0kB isolated(file):0kB mapped:249428kB dirty:196kB writeback:0kB shmem:27472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 907264kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1608.457171] overlayfs: missing 'lowerdir' [ 1608.512806] Node 1 active_anon:3880kB inactive_anon:62772kB active_file:6756kB inactive_file:376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1608.541204] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4120kB inactive_anon:224kB active_file:1096kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.580923] lowmem_reserve[]: 0 2531 2533 2533 2533 [ 1608.597936] Node 0 DMA32 free:61424kB min:36048kB low:45060kB high:54072kB active_anon:882712kB inactive_anon:236112kB active_file:113064kB inactive_file:225792kB unevictable:28680kB writepending:392kB present:3129332kB managed:2595396kB mlocked:28672kB kernel_stack:12832kB pagetables:32732kB bounce:0kB free_pcp:2588kB local_pcp:1264kB free_cma:0kB [ 1608.664692] lowmem_reserve[]: 0 0 1 1 1 [ 1608.668845] Node 0 Normal free:8kB min:20kB low:24kB high:28kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1652kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1608.700446] lowmem_reserve[]: 0 0 0 0 0 [ 1608.705437] Node 1 Normal free:3467484kB min:53816kB low:67268kB high:80720kB active_anon:3880kB inactive_anon:62772kB active_file:6756kB inactive_file:376kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:5056kB pagetables:2088kB bounce:0kB free_pcp:2100kB local_pcp:1496kB free_cma:0kB [ 1608.736529] lowmem_reserve[]: 0 0 0 0 0 [ 1608.743209] Node 0 DMA: 3*4kB (EH) 4*8kB (EH) 7*16kB (MEH) 6*32kB (MH) 3*64kB (EH) 5*128kB (MEH) 2*256kB (EH) 3*512kB (MEH) 1*1024kB (E) 1*2048kB (E) 1*4096kB (U) = 10396kB [ 1608.759242] Node 0 DMA32: 558*4kB (UMEH) 1903*8kB (UH) 993*16kB (UH) 764*32kB (UEH) 57*64kB (H) 14*128kB (H) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 64512kB [ 1608.775716] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1608.786918] Node 1 Normal: 67*4kB (UME) 20*8kB (ME) 17*16kB (ME) 16*32kB (UM) 15*64kB (M) 16*128kB (UM) 19*256kB (UME) 12*512kB (UME) 8*1024kB (M) 5*2048kB (UM) 838*4096kB (M) = 3466108kB [ 1608.804531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1608.813553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1608.822378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1608.831385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1608.839995] 65090 total pagecache pages [ 1608.844137] 0 pages in swap cache [ 1608.847639] Swap cache stats: add 0, delete 0, find 0/0 [ 1608.853102] Free swap = 0kB [ 1608.856161] Total swap = 0kB [ 1608.859275] 1965979 pages RAM 03:42:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:01 executing program 3: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000200)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x40040, &(0x7f00000005c0)='-[.\xf7') sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xffe0}}]}, 0x44}}, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x22, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) 03:42:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:01 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8994, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10000, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$UHID_CREATE2(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/473], 0x1d3) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020005491d, 0x800007f, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0x1}], 0x100488, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/58, 0x9}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000ff000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280060002000800000004001200"], 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) [ 1608.862465] 0 pages HighMem/MovableOnly [ 1608.866480] 345198 pages reserved [ 1608.869947] 0 pages cma reserved [ 1608.931234] overlayfs: failed to resolve './file0': -2 [ 1608.989243] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 1609.042616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=23319 comm=syz-executor.1 03:42:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8995, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:01 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=ANY=[], 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7c, &(0x7f0000000000)={r4}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r4, 0x400, 0x3}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001540)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000001640)=0xe8) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000001680)={r7, 0x1, 0x6, @random="c2553fc7353b"}, 0x10) r8 = socket$inet(0x2, 0xa, 0x0) r9 = fcntl$dupfd(r5, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 03:42:01 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private}}, 0x24) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@generic={0x1, 0xc7, 0x81}) sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d17f845fcc2c64370100509135c5"], 0x18}}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0xe, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) recvfrom$llc(r1, &(0x7f0000000240)=""/242, 0xf2, 0x100, &(0x7f0000000340)={0x1a, 0x13, 0x7f, 0x80, 0x4, 0x8, @link_local}, 0x10) r3 = socket(0x11, 0x4, 0x7fff) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000480)={0x1, 0x3}) rt_sigaction(0x3d, &(0x7f0000000080)={&(0x7f0000000040)="400fb2242d0a0000000fad27c42261906cb0648f49f812ca0fc28edbbc00000ec4027920f2c44208f246b2c4213554ca26460f01de0ffb2d99899999", 0x2, &(0x7f0000000180)="c463e57966050a449c0f6140f58f6858971505000000002e36660f38f530c4c1e9fe7f00c44149596a00c482f91eebc42289deb300000000450f381e5e0f", {[0x7]}}, 0x0, 0x8, &(0x7f0000000200)) [ 1609.321706] audit: type=1804 audit(1597635721.547:940): pid=23331 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3415/bus" dev="sda1" ino=16675 res=1 03:42:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89a2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:01 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:01 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000080)=0xfd4, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x6, 0x100) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000180)=0x18000) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r4, 0x0, 0x30001, 0x0) [ 1609.544850] audit: type=1804 audit(1597635721.767:941): pid=23349 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3415/bus" dev="sda1" ino=16675 res=1 03:42:02 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x4000200653, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89a3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:02 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x7fffffff, 0x3) r6 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000001) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r1, r6, 0x0, 0x200004) 03:42:02 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1609.998683] overlayfs: failed to resolve './file0': -2 [ 1610.041714] audit: type=1800 audit(1597635722.257:942): pid=23371 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16304 res=0 [ 1610.080025] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xe}, 0x0, 0x0, 0x4000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x6, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x32}, {0xfff, 0x1, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x4, 0x10000}, {0xc17, 0x270, 0xbf2, 0xc6d}, 0x4, 0x6e6bb7, 0x0, 0x0, 0x3, 0x2}, {{@in=@local, 0x0, 0x33}, 0x2, @in=@loopback, 0x3502, 0x3, 0x2, 0x7f, 0xfffffc01, 0x2, 0x80000001}}, 0xe8) r1 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev}}}, 0x2e) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x0, 0x9, 0x3, 0x2}, 0xf7, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0x3, 0xe9, 0x809}) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt(r4, 0x78, 0x7, &(0x7f0000001140)="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", 0x1000) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) socket$inet6(0xa, 0x2, 0x0) 03:42:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89b0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:02 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcd, 0xd}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x50}}, 0x0) 03:42:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1610.771605] overlayfs: failed to resolve './file0': -2 03:42:03 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:03 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1610.936806] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89b1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000040)=0x6) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f82200000000000000014"], 0x20}}, 0x0) sendfile(r4, r3, 0x0, 0x100000a13) 03:42:03 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x44041) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in, 0x4e21, 0x4, 0x0, 0x0, 0x2}, {0x80000001, 0x0, 0x0, 0x0, 0x2c137350, 0x3}, {0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504}}, 0xe8) ftruncate(r0, 0x8200) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000001640)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x1c8}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000140)=0xffff8000) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) [ 1611.193409] audit: type=1804 audit(1597635723.417:943): pid=23427 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3418/cgroup.controllers" dev="sda1" ino=16489 res=1 [ 1611.220927] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:42:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:03 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x44041) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in, 0x4e21, 0x4, 0x0, 0x0, 0x2}, {0x80000001, 0x0, 0x0, 0x0, 0x2c137350, 0x3}, {0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504}}, 0xe8) ftruncate(r0, 0x8200) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000001640)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x1c8}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000140)=0xffff8000) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) 03:42:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x13, 0xa, 0x607, 0x0, 0x0, {0xc, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44004834}, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, @private0, @mcast2}}) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup(r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x2004c054) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xc0000, 0x0) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f00000000c0)=""/253) 03:42:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1611.508273] audit: type=1804 audit(1597635723.727:944): pid=23433 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3418/cgroup.controllers" dev="sda1" ino=16489 res=1 03:42:03 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1611.662519] audit: type=1326 audit(1597635723.887:945): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46007a code=0x0 03:42:03 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:03 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x44041) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in, 0x4e21, 0x4, 0x0, 0x0, 0x2}, {0x80000001, 0x0, 0x0, 0x0, 0x2c137350, 0x3}, {0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504}}, 0xe8) ftruncate(r0, 0x8200) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000001640)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x1c8}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000140)=0xffff8000) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) [ 1611.717811] block nbd3: Device being setup by another task 03:42:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:04 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:04 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x44041) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in, 0x4e21, 0x4, 0x0, 0x0, 0x2}, {0x80000001, 0x0, 0x0, 0x0, 0x2c137350, 0x3}, {0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504}}, 0xe8) ftruncate(r0, 0x8200) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000001640)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x1c8}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000140)=0xffff8000) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) 03:42:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x40049409, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:04 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x40086602, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:04 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18) ftruncate(r1, 0x8200) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) r2 = socket$inet6(0xa, 0x2, 0x0) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000240)=@ll={0x11, 0x6, r4, 0x1, 0x12}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="e26ad2c02785c636bd870daa6a51b6efa68a", 0x12}, {&(0x7f00000002c0)="b721693447cc9cd97431f38fda964a195ea9f69c43534a78a21e600466df9c9370728d3630603f89519d1632a226f7575ddcced734d25bb125d6e50ba964de3c6a3c94237a9e3f63dd785dbb2ade26318d4a6aaefbc63883b4946c089cbf600aeaf628e25fc382ae8b4930e0370fdb93592c22b8cbedce82", 0x78}, {&(0x7f0000000340)="16e986f42645cd5c76ccf221aeeef1e0f2a725f432fe3c27f0f201e04192e606265630994065e39f4258f54c6a9b4f3e6524fef8c77ed1130532110cbff8d4b213aadf60db20b06a845aa88d615106c53256e74df055b7ce462e34f29ca8e11557f8706321681869171e23666b74fdaafd1f7aa9d88e1d9043ebfb305dd697e9d13a49c123b63866e48c4fc39eb69ecf40fc890b90092248c2ed542fc7d3ab09eb2d5d3e7073f7f8de1014a4dcedad3acb0fe02b3453d913de1866e237264e6cafc2496bcca09a91145a949cba8c813b1ec6c33bf87ee50ba0a8c9c5", 0xdc}], 0x3, &(0x7f0000000440)}}, {{&(0x7f0000000480)=@l2={0x1f, 0x20, @fixed={[], 0x11}, 0x7}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="de449cd2244d4dd4e4cd75949aa69f59a094fc03def465a71ea50feef02092dda135fda101e1720e21facb1e66a275e749d14a911778d6833bce07aa4aca1beb89c5851ad3744bf63f87e59f0cd1a852fc633a29b505fad3e5ca400a4b23bd4868f9526c1c7b7c879ff75e99bf6ef5964184cd7e147a5c83bbf1cff3b58dde6d7f", 0x81}, {&(0x7f00000005c0)="c90f77c35cc998424502bc1b7f01e60d348286d7", 0x14}], 0x2, &(0x7f0000000900)=[{0xe8, 0x113, 0x3, "c1bc86fa387891e2187900bafac2459c9895730e59e6702cac82906b6540b7ee0cf186f4b9528e2a97ca21af3831d7818371f092d758182205feed717b28c58cd53cf31ae719526d45a33a3517822944416fe4868659612f7c357db8aee06f28f29c4b7f8a301ea12fa61e1ef5773ef81ca4abb0b2a5aa66f557c430859fa568bc30cfe3b3c88a8c30847055fef1287f2713ff598ca8c6e59e26297bb5d9e7517883c07963b0676dcd78a735baa5bd29af07a5236240b08dda536439d87923b0a92b3fa142410dfc6dd1ac3949ecfa9110ad7ac4c6"}, {0xc0, 0x10f, 0x80000000, "bbc1665a3328e801f779bdbd2e1b12c1d7f5956fcfcb5452c2b5741ad68eed945ea6875ba79cd324ccba4e5420623023b2123dc87fa6c5d5b422e1cf52bbb6ffbafd8b777104949317f68d1663603297e480a484fc3d895bf4a0b998096c2142a62729f9bce568e5a4b58b40bb244e9765451662aa07a69d0c77e63f02af8783b2e3db7f646975d459232bf279f04f5326ef25926948848467cd6c8ba4398864e8454642c6ff3e02afe3466ba466"}], 0x1a8}}], 0x2, 0xd600) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={[], [], @multicast2}, 0x4e21, 0x8000, 0xbac, 0xfeff, 0x2, 0x20, 0x0, 0x2, r4, r6}, {0xd9, 0x4eaf, 0x100000000, 0x3f, 0x4000000, 0x0, 0x9}, {0x1, 0x2, 0x2, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x3a}, 0x0, 0x3, 0x1, 0x4, 0x1, 0x8001, 0x5}}, 0xe8) [ 1612.427154] block nbd3: shutting down sockets [ 1612.437955] audit: type=1326 audit(1597635724.657:946): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46007a code=0x0 03:42:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x1, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x821}, 0x810) 03:42:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x40087602, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:04 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) [ 1612.473089] block nbd3: Device being setup by another task [ 1612.490737] block nbd3: shutting down sockets [ 1612.584091] xt_bpf: check failed: parse error 03:42:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x4020940d, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1612.614820] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 03:42:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x80086601, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(ghash-ce,ctr(cast5))\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') sendfile(r2, r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000a455a4130bdd6d4bfeca6700b35a13317a674f2a2800ba0845e1016d063c454319da901d23e3dafdb25dc93de22edfcfef4bf70d0349e97f3f1e223d977b9e8c008c4ad853d40a1817ad5ab226da7188dce95d7994e209120d47b9c5c9daf8779c0f877f187644e0a369cc71d0a5b94242a727e240661dda877814ab5574afb5655ea20f5fb72be6b508f95da0588fc37bde35c14e27c05da85bf0dc57f2", @ANYRES16=r4, @ANYBLOB="00002bbd7000ffdbdf250100000005000400020000000500040002000000050004000200000005000400020000000900010073797a31000000000500040002000000"], 0x48}}, 0x4040081) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x4c81, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x1) dup(r7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') 03:42:05 executing program 3: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001100010800"/20, @ANYRES32=r3, @ANYBLOB="58588344bbbd8ade8333d8102b780c718daad360c53b6152b5be62debe1fb653346850e6e02e078cb48973cba08cd1a21baed0e932d6f54922ed1c70473063041788a5a56e9bdb0e08db72ec028ec72580ee0a945c7234f824ecc70d44c28876f328864052ce043f62eee14255b2fe4a717ca6fdb2e4b13fc981b6027ab909999cfb1e2bf517698b260f394bd4f7"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x130, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CHAR_RAW_PBSZGET(r7, 0x127b, &(0x7f0000000140)) sendfile(r5, r4, 0x0, 0x100000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) 03:42:05 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x80087601, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1612.944453] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 1612.952195] audit: type=1804 audit(1597635725.167:947): pid=23542 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3421/cgroup.controllers" dev="sda1" ino=16169 res=1 03:42:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0xc0045878, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005ac0)=[{&(0x7f00000005c0)=@file={0x0, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}, {&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000200)="ce0cac1ad9", 0x5}, {&(0x7f0000001c00)="ff40b63257398bbae1563223c6f71cf8a81deffecf29b173b7f9c85c9f2ba60b854348abcd94e2df346b6cab84ca8abc95a12e2591519c052c6377643682c13e46a5ecf1e0794d855a437ff547fddca3f144dda2bf66882c19b3e6c66cca400774b6736757d89f07489f977db9825139a3fa8ffe68ad99d24cebc268a6369c6bc98fff9b0e4c01afc0c66cdaa15d1a71758ab3a9ad29b15cd636321729689bba60faf72d22518fd2", 0xa8}, {&(0x7f0000001e00)="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", 0x9f4}, {&(0x7f0000002e00)}, {&(0x7f0000002f00)="f049f0dae247451ea6939d59beba26b0fec87be83a8f70f5faad25ee59aa9365a9e4b9abe82439521e838033111b7e0fff654904268b97e20adf8ec7e3989ced4caa353f88ce27a16e6caf491017eb9fc81cd04ccfb81c5324c67296d3027fda1d4e5527edfb8627e6399759c7f8a79b27c74b399cd33134b9984ef286f4a4d609d1479b822db41a836c7c7a0bba87c496ce88447afa75c583210c49522b7f21ebfbb1b7", 0xa4}], 0x5}, {0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000031c0)="53c01763e811f5900695f178d78dbd213a872c2b4a4a6349558333b3d55d9dd5657ef38ab1742ed0124bc824638540ca2d9fa626b24908e6eb8548b164530f0b1d2b949429bb6cfe0eae0c7e93d356df0015ffb77ece478bb980ba56f82159f9613f151bc5beb31fc7722896a70f8dd0d9fd98", 0x73}, {&(0x7f0000003280)="52b8d828a3a4bc895ab80c8f9fc29da6b89f95b21cf2efd791756dcb5418761d97c9a34bfa4091058f646f33b060273418e415e6168a3fbd326df77a33b715df4e0bab4a50b04bc361ee160e207d364c915663264159395ad31864097212b9e807662defdf", 0x65}, {&(0x7f0000003e80)}, {&(0x7f0000003340)="1016b163af216135726f7bdb1551339b92686cb80ffa3d47d734a13b1d1e17", 0x1f}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0x1040}, {0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f00000036c0)="4fbba31d434f", 0x6}, {0x0}], 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="bfad9c0400e95d96c2e462e769be0f60522e020a1e2a717eec6c369d6fcd8b30ed20192143", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xffffffffffffff51, 0x24004001}, {&(0x7f0000003840)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x4044014}, {&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003d80)="f97b921993eecdb6de0bb110a1bd87f217f07888994067ea9f0caaca3e19e19584ba356c1215fdfd2373bc682fed0c324aed18768a36b757683b80dc598fff48b453163472f8409dfe0e863496824a155b417f0df9819306527b9d4ef93fee146fb4fad738e4bd1ab7397062d45c9a7216d73950892926d47c6cc411", 0x7c}], 0x1, &(0x7f0000004040)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001400000000000000010000000100", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002", @ANYRES32, @ANYRES32=0x0], 0x58, 0x4000800}, {&(0x7f0000004940)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000005a40)=[{&(0x7f00000049c0)}, {&(0x7f0000004a40)="e63b86f8ebcc04b743d5fe914be15ea7ce821417368ed519ef5759a0c0dd313f299de4f8c1f434c6d5faa662535744e89684f6e39e2eac6a4b765780cee828f0773f167d704ab9266601d6558f639227708aeedecabfc801f360b7f9676559564497cb6e4e26f82ea4275333cd4aa92169aa7bd7fd2400580aec4f13cd11b3c3e46ec8f9ff663b11bc1c890bdf36b40a6db1093f2dd7bc1e11f39e27f15e540f32a959a5dc3c1a4f61a49711a35810778235fc6295b8670b7fb42ba3fe28dabe3eace5155003048bbbafb193b65de7e2cde18b1093a531805a56f15441a3b41e3ea75d24bb221005b03191977df77326f24b94ee481cc846ee9c2d7bb7099f9f401111b7d8b275593179f59a5aae91b9a67dd53a2ee70e7456bf7a42baed49a1675cd141f339f2c4d5605b899be3e97da530517964221a5208e06582739911574b9aba4ae53fddd63898a8b1cd3b1d2a27bf00c42e13bf38d20f64efd1dff711ee541b8af6f55af44914c634fec6e1ab893d21727ae37f68151ea79971f15ae731cdb000392349453dcaa08cd797ad1f46534345cb4bf320f72755ec77fd860fcee21770fe11ba17fa96213367ace655d34e37de586a408f17e5cdb4843e5beaeb0215ce9c5f9711d9af8f0b58094a4d3723d6201e80c867db7473db174ec7c16e663333b47e79964333e178319eb9c19d579ed53fbf44e7a9cacaf87d2dec60feee906bbfa18ed399db854c78a746cf4944e9e0af0dd15d0bd915ae43a5173f9c73c0333db28de454b0ea76446c4b3763be384d072fd48688dd27e43bf4d2045413160c140898412bfd5eb3bb880e1bd1005f15d1791d6bb476bccb78d5a00365adb7eb9132ca020dd1a0afd12f87c593036c5219cc0f4a4ca2b5861130050a486e35e367afaa5562bb80faf0b6daf06c27b04e2ee68e94bb944b6e75ff87245e5cd0b49084725921ce7de4500925f799bcc0e22fc713ad78b2908998c0032bed9ebc86045099e5b66a189aff2d60c49467d912f29db7a2fe29c35c1c0bcc2ebb001dd6875991848465805311cc58347377a6600a719d8b8ae25ad2d786adec6af7fc7a11590fa58b40dc6d508ea56e96fa50262426ac0d88c47f84745366847b2e5a39e4b4998d0cbc6dcc0c2a87e420278353d96e33e73a45042b1af98b89dec1e2f36f183584b81a75a4dbae1ac44fe8015f29dc4e87dd587915bd5b274f2de2b837c847d24ee5aa1116790a8e46803be7e6d3a0a721c188135b9c1ad1ee2265455f8c0b90e4aba72c506afbadab3b99e899068202b235c73df394010d258a2672958e0cbcc72d644518a99229afe45e21fec74fbc456985be4ec4471b144cb447b7d78abc5cc23ee68e4f7a6b8d680e11376a84b8ae045e048a8b59159191456713363ce3f46c9eb59af3c92b1382ff45e9227a7989acd952f75198db27168be8a572c5899821ac15c17fbddc813aa2d655e551e9278b59f560acac799171abc9ed85bb3886bc17d0d88dbfa09da8514e78b9ad1b75018098851ad3ecf54b535b38d15205761a1cbd36c9d3ba28e07c9621b3b4ffde4f8313f2d2c70f18b2e054c100b7afe86363a4f2bd032a719416c3674499a5de28fb5854bb91492bb9406f24996084fbd1acff58c8e85234ad5ab24c8f609219c2d28c67443cff02be52a5fca19fc32db0947bf97ca21dde25e93c430fab78713eea2fbeed4a958f5c9b4ab2319151ca1609348f7e4b0daf17b8066083e7d408ff77c4f8be5585b4fc9ef278e614d91b698458f440654981b9419496f9c5d19e89b70d2b997bee8a6f52b3d56d94d49a5829bea201768f75e4d76d186c8572014ab235ad8283e9c920f628daa57e36a091a3f3f48d0c700ef84bbebc8b3c5e36af8073ece45aee5b9ec528d5d14b32a0db82d3aa527308606df1b465aa6fdd8f5875ee94bd77bf2420ddf7a77bc35a8b1f2bf064817736a513030678e8adc437ade3e719452388a59fee50a71cde26b29b95c7657f437669523d944893cc47bf41d6d71951537130f68f4e2265c4e44a34377767155e004feac0b2ced9f027a18629a93854a3f24bc1de20048be2fa5d1b4f00a9c87c9016ca43821e52d9b313532964d1aa4f3a2f145c18926c14cc7fb02bc82ff46c00c14de438f8fbe9c60fe3a778ecf64e8ad4a82bd722a2b68cff02cfd0b7bdc22ad2e991517a252ad93e20167882ea1c8adb2a2b8f45a228e2353f31408528ee1052d7312e925e5e2d3afe962e7f4da29e02535f5ef4f86e31cad5651a67b60f6d705ae4ae4a504bd5de7a2d7925422d9a1feb5597272a3307ff3b6d376e5299f9f9c6f632dcf965eae5e4148b9d10fa08a751dcf08b332034814f7dbb75d9e6c130f7ee66095537532832331be1386b39c1bdad75669b984362dbff0da1ed0b7c52ad8cb102d764a333cd472a492f2477b32f3e81b38689d98a042b1c663c7f1486618446659d30c0235874a3bc3a11a74a5739681b7ed7d484bf52822cb9fc84e78ac7a9a7f3fe2d8e513c930d6bf46ebf13f3e1da98be1777a35fa0f48f142cb0bee46fe6ce1b27cbe9328dbe015351876d3443830c76f5ef4755a6f7cef7cba294308c122c7631e1ad0429ffdaada20cf0caaa15a6387a96bf578a6fe497245844e8f658bac90cbb82e290b3e3a49addc30eba1cde25e62d0738d07a9bd2a37ff7596e03ac9d3451b1711bbaf13c6219f0efd1d85b30057c88d70819aa810900f20f987bc89257e401c26aa0cfc7425ff61fc4385587d82faa06dd6d5541cca6b372131fd579289bd7ca94cb19ad309c30a4342dc531f0c25ebeabacc065ca8ab735b769614ac1876eeb456289c424b474b12c6244c4e25bb920d923ffb07bfa87eb82fbe8c596165b976bd3802b2d7b77d9e90e6cd74961c6c8a4a96b6c43597fc6c2bacabf5f9da14d98f598815fed8edfe8fac8c978431be9dc563b91691ccbf052955cbf8a4819ac2651470827dffeacc3f926f9f5e20c75331e6cdb6eeff128c2a6fe6d475d3e384381bd6f6bcc831b0b980f47c80f8a52994e760e76836e1489df47b863064480bbba9726adcdab869e102c8ed27483f2f643a8028e3a4b1f813037896a0412b75755bb49835d60510391e9fa5c2c491c2a20b03d389d44a56914832a66525c242b209bf061b8fc4a993e53dc7864090f39e76412a7f69363812d92af16d4d6ea5bbca7c90d1b66a8c1ea8a95cc10042a601e484af51ba2dbbb819a98ec158fd401128e387239a8fd511d942b287215693959dffc7dda0728dbc0730f0b16a9f111d3cde21f739800794843a44a63c9bdb3d474ad07c072d444862a89ecd1b7bea61668e2dcc155330bd06c31444a9a9bd9e04eccefb2a6a853b6f75488471ea0829e12da9a82e3d2025b6415e5ebbcdf2dd395ea1f2ab1f202d9b43712b24218119aa1c895e4b7b29795563ca8ab5bea7789b162c841fe3799cb875d6f7f78adf1d1f04b0f7f04f6342868b2202a5b9c263bede0a1c84556a9be5bf6b6df0fdacf0dc44a1bfbabfec2483a69586e8b2c9fc7f23e6f58116a4e46db882e2ad524c92a23c72b98e5653cdd5d982b9facde03063db0ca002aff248a7ce179ced26eca30e68aaaec3a6614110972c7971c6d4157545bdf26abbb1d2696bcc7003da93452060f98ae7f3c56a1f263d16ad5559dd239986dd7a94f6ada92042bb84f0e1f3d9999617c729e37894a0de5a5f190e1a6c7e4dd64acd72ff3960347a0e1066f590c7b47678b90b6bf8e40b64e0fc349ee0a56341a48a58dcd1ac3b3863854d4c654f4d8ae0999eccba22d7a2d9c1e6e4c2c0be460d40948f455e085c158823bbf91d942c6eec130bfc47c3f7cf5accb5dad5f3a00a8c79c3396b00f5e639f1ee3ab59ad24e451efb80524064032a828461b3acd8a1034de0a009e709cee46e736eda00b1adfaf7b7ad5aefcb11ccc68722cb20177b767957366c89c3e560334bf4fc10e2b512e910e85d90ec3eafc8f7a6e1e27ee92a47b973c6fc523bc488edd47b513db7045fa70030f20d00f76909964ad052c110169e8510937a8553111459b47b3d37f6a3af46f5f1430e3b02d68888fb404582e20d12137227579f3a370de391d8561fef5c41fbe755c0a1a5f4e5589564f90675129ce9a575f40209716d12ac9cc1ac2edd17264277c44ec2949745cb44a834e2017558ffe31ec4234d72f08cc3a94dfdab5259a2a1f5d32638a8b818be96e417828144cc35e1c784ade3848e11ed3ab2200487b9ccc3d9172b3cdca835e17e62aa3ef17d648594343ca0eb01e853ca8ca3446a84acc8766cf9999b5e20a51787a02d7452e745e0e9e59bd3b31066deb8ffe2586f3f7db7d3f21a0f08a5482faedec043bb91e9dba0953c5891ad3ed54ecb50194dd50505b0f811cb60d2446be8bd6f83139f6f5d9a0b3609045eb914ddec7807da8e48758374ff56647ded3a3f5b7d6e92ee79eade013f2337bef6a6c402943e8cf3fe2bb4bf7ccbe5fc9417f258b81e6beb2053e6d665dee38d58be608438ca0052cb4ddf3d0af3e02721c849d80d59d1d778b6329c2e2d6d927e9bad76a243a34f0c2cee8fcbb0c6d7812c4d370b86c3a0c26cd8c6f05d2e8167a25010769cb9bd321656655346c622ac361793cc4fc01d5211257c7a7a5798cf704b1cdd06a457266c88f6fd5f311f28f849c2015cc6aa24fc2256172dc7cd0cb82383f7e17c123202a6c4bb8f83cdace0a1e26af35e45696f960ea7a4d156ea571b3f2100a7bebc6c600258d93142a07cb5fed547231cb973792fd2128d0ecd4c1396084f5e356c25e4bcd666208fd5227c145901cbbffe7bb1887100391980d64b17a91e5ac18e42e284f321a210d93e5047c99080c8b87709892acdf99d00e3bf0289ba2b7ce2996d8d214631b49d6f5ce5a4cc4485a5ec6238f17631281dd56790ddfeace0027b9cbb15197da3156098bf8a247afade4663fc735d891ce770788f22e2ec84427861be1f95c21787ecb4ed0a1c02bdbf4b97c3880fd397dedb032eba1ec7945c14b5bcc235cf0fcda171b065ccf9c32b49b9fbe78a12ea5d2693ac1ba40ecc8d5b24db0e3fdc5eb1244aa4c8b4276de9b6b08a4949a160f85f00b67a14c0222e709ac2eb5feab2d54d015a309e653d52e09900fd6ac1850d2d200a6969e3eb83267d02cb2043222654fc310a5b369426561b70909976875e9e226e6cb8314967c26ddb8779a581392fa50b6b54a034ad2ee81edd94ced0f62809b061076595ce797f2b448ba04df8f9a11e85ad498aca7c94a38625a4fad96b5bc4fd7f5a8cfb3951518f55e42e525d20e4ff60dd16cad08cdbee5cd87459e9633cee0728692692f5d0b8595a1d34d9c9309d9ede1ce8394ec79d03132ad5f870fdb70a6ede0b9e7892c77826f55018a310789be6304a9ea0d3ea2fd83d9b6b182404191c05e009d975acbe51a4169a6d9f22df54d129561215282cc144010144b14182615974402c13c11f6c5da70fe2dd063a32124343fd054d42e8aa331069de60d4f59b99dbe796603e79fa7d56ff2157201418d7b57c943082fd5fea59d8e422867d68a6cd1ac6f01457236800708d61cb0d9ab8fdd1158058d09fd8546ed61c13135c910d3130f80ed77f5dac26ef0784242f094799413dd19a7d8a1c8fb96de3e2b5b0af397b09a6a57a2d557fa4d6c92f5908bcb1d261c86f7504ad74c9f34a226b69bd557ffd906db1b2ba212ccd7ecfe0d0302c10aeb1f66b00e3ec52eab90bb0a645b6601dceb", 0xfee}], 0x2, &(0x7f0000005a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20}], 0x7, 0x200000d2) sendmmsg$unix(r0, &(0x7f000000a680)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)}, {&(0x7f0000000cc0)}, {0x0}], 0x3, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, {0x0, 0x0, &(0x7f0000003780)=[{0x0}, {&(0x7f00000038c0)}, {0x0}, {&(0x7f00000015c0)="2068a131ad", 0x5}], 0x4, &(0x7f0000000940)=[@rights={{0x10}}], 0x10, 0x200080d5}, {&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003d00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000b80)="93eb0e68bcf73d40725857685628999f350395230de18f12157830a47c99847ebc40b4c28446043edce45976562b935e544273718028c8911e6b7a646abc5b3a7d466b2206462bb2b3f55c50850def2d42bb0353a80816b0e3afeb4451cf4c0965eafffca64c02246e02247dcb41a8b2660bd6c5a4cb", 0x76}, {&(0x7f0000000340)}, {0x0}], 0x6}], 0x3, 0x0) 03:42:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:42:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0xc0045878, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:05 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000050000a2e59291000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140007"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = socket(0x100000000011, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000240)={r6, 0x800, 0x3, "25402b5e6020878347b1f28eeb3f3e785a68b21a217f06582e1df404498a970d89fd3aaba3abdb39787081ba335ad228ec183826779e5ada20da351a56f042783138ffa3a249b8b238f9fa31db7e785e89fdd3250b5a06afc5147444cd264db6d2ed306ae6da3b04cdc4b834679d24cb91d860b05917e6a5562cd056c54e87c915228f4df116916d7579f32fdf8c"}) 03:42:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0xc0189436, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0xc020660b, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:05 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1613.575508] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1613.775065] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:06 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:06 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0xfc, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1613.954538] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x80000}, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)=0x4) close(r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x42, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000100)=0xa9) 03:42:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x6b000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) ptrace$setopts(0x4200, r3, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x200, {}, {}, @ext={0x153, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x3, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:42:06 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1614.304338] IPVS: ftp: loaded support on port[0] = 21 03:42:06 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:06 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x900, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="1400000052001f0214f9f4070009040081000710", 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 03:42:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001380)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000000)={0x0, 0x6, 0x1000, &(0x7f00000001c0)="8541b158cfb080d0319d6eb6cc0fce7f09d800894aca2d19eb4069aa5300e18839d301d5a2945f70aa4012c0cc4a026eff47fca590a1cb709e0b43d23069aa256685c253b3dd11fd746347ef2a288fabf107cf94d005a278d9d9a758c8fe0cece788511f174dd7f5541f3ed6baed0c42a35f263afbd3a5ef32a099077b3e3774b9cf229089dd2a0ff7c8f36cb587529c4ea622c83c84489c36ef84fdc7aed3280c39afa8ba0776466e6961337506cebf9591d9392d7e8a426bd152c20c445ccf02137ae74c68ab5893cc44ef18286bcab4da2432956c36e75fbd53c54a0da27a579b44bb7649ff680b45050ba3802ffc60e15b224ca74b6491e2530c6ec3c9a430e217799068ea093e789a465ada46c000d3cfd19bd11efad86617f93432c473f933037a17ac4cbaed5b33376dbc1cf21b8ac648b408c001cfcdc683162cb493c026492fb20f13ed2d4261a3c978c596815a86cba41d1ca275a404016558f26b0afebd50c69dd7651123fa1de20859da73e83a0730dcaab376bc22623081a2702f0a1275e4fc0cec42d6c0eb96350d93f6654f7d9f61909cd32d6cc5d2c129fc6f6af073ba78b4e03c7a1799b054b32bcf887a7c22720c896c92e8dffa7846f07dd8b1c3045e0bc58f901e18a8554c67d6a5d3c0080bb61685dfc362bf2840acfbed7f652f4bb52082320294f6129caca13f05e367f0b6d61d0300f47a064c3a9d75efb59a43cba9f6ea8c9a547d9e288b52808b3ff58d539f92a764897b1b8b5f28d4308df4280038ef7ba258a202bcadec4ce9303a089198958bd9d350d73c682f528968d469069bc9b06aef79d89ec11606e3f2cfb949967e520f11b8ea4bd833b2557b25ee4e40e45bd01134d7fb440a88071bf4b7c2a57bce4e1ec39092ad74bddc9b904c55f4897cefad33efa2b82bafa217af6daaf786a9f054405a7319b9b9035ab15e05ff1b1d97ee626d1b043efec0785df18db9e4d2df98bd419ab420a792c9f96760a8aa69a2cd07bbe94fa412ad97a94e3d6628979956dfca0637f8355d9d321baddf794c78e911c58e531db6bbea78e8ec0f0730c943ca3ba9e650e7bfeadd3625407f3776fb49c6e1cc76af1d342585367b48ac99deb04ca03b0639cdf3eb4d201fe481bf8cf545d066845a699dc4db88bd8cb5c5affa1d5958f2a7c23230a214d79ea02e59034d371ec4529e31b338fbe8efd61f2db91d0980d990964bddd9f7c130c4acea5779ea1ea7044d279a1fc6b457dd8f03d5a7d12f47859fb467aea51ed9b23c0b3bb6ac1c74bc72e45c921c22ba0c931b61c7afc8015b61b22b9d9bed592972691ad7dcce9f845e207754d4aa041c82efe0cd771ac18ec55e50c203b1b402b4e8f197b482ee28d86e74acdd1cca0d9a237077eaf36119f7a9a396911426132ece6473c06b8676d5be2eceefdb4b3f1f3a130d34f8439070349e58246626a0e01ef6f60b3160cd0931f666a3b7285e31ee423944b97d3ab37c3fea14c6996054ef2a1823450ec642d8a902d300e34641e7cda140bee5ea8ab553e45ebac021acd84ba7be995dd50eb3e906c017d8931b35a63deaad0e79ece1fc5d2fe675892a9dcbe1a95c0164d08cd831798a69954e2805e3d812f3d79242509a58b52ffa3632059155bd7b30b6dabdf9473aaab2868ce2771edc6ffd24464e622ee6d325fc0cf40088c6cfe54e316c7433193f693b2b5465af1081f500830fc594b806d42eb7c7dc1182a2c9a9b91513687e7f0320787983442940cbc368bac9a16699babbcd13123016a20431a7174e8e17bd17686e29d78c7a2589d1861d34ce0bf9e22e81a72e1272f60309cd252c11093906399d6090ab2bd9f3970299560e4d21cb2c38aa2b89e8cc2ad15dca7d503d5e33b734b9304f1b7a6c6374f457e14d4c5c3052ad5bf55e74a1d4029d3ff465eb8a647614f48e0f801dc0ece90e473f4f4e8f65fb8709615c2bad116732d977920f68dbe96b1daf95ce58bcdaf9515d0c2822436dd64a5d6d5d75571ed858e46bf5a9314f5fe947643e63e67cd1d0e6dbd90c89da1a96e22e0d2ed87f494b1dbcf353b52afd80625765302c0a643564deeb5393a43e845614cf1d9aa3d57aeb9695d8035e980b5908417d1168ba324231bb0e5b2e25a0b8e5b3af20fad7eb5b732cd51d95c2db327104b65c44b23be7413080834606a52cff83aa48daf1ded2287cd20e4f1f48d301bc62599028ddc60beeee2a3514139a54b1610baf7773d95bbbee9db0941fea02c4d475f35c9277518c021ba77a9cd5914f2a9243e4332d8c6b964360e15438eee5d5725bc2a61b06cba85b6c1f26efdc8a4fb7538cc6709e813dd19f4041879c0fa8edfc7cf973d8e7fe92f30db12c76d7a702beadf934a34d10efe5ae943047f812c83c7d93190517cef5d80ef8471d73f14ced3ce9a879f60eb2c6c4c7a45c1bef2a36ae30c1a7e7901f97d35982c628f2085d83ee9ef92c1358777d51782ea7116d35fb8ba9e6ccc8dd95b4558689be1c3a0ab0f4dcf4b748f1d34d0110b60afafe8328bdbe816f39c91d1d89aa17bf3522d077cc7a507c5cd4e9f5162722ff07b90e6eaae4a7563399eb61a2ea9cab75786df9a65cc92c6667ae7a3d536517191bd451de0d93168901afe1aac2ef336becc38173508ebafb2bf333f4c15f62d647c612ef2c10baed3e7172544b3cf7b3fa9e6dcbe0213f6909eb174bffe2738de80d62dae73bcab9e7fc28280eb26d6d726b4db957a68f1bb8c342292b98da4c9c59a0fa4690d3a0bd4bda0d09d11bfab00830e27ea36a8de2ea671d7964dd60db5b347b38f7085c0a3ad02624d00a2d575d0f26c2d10fc2798bb482ef501ee4cc02aee1fbc71b70812fc1dabfd5a3fe30468edff69e8ffd183d7ffbbac5eca5980cdb96d0b50140220b6930301de4e37948ce4679b1d42563c79e80e01047eb408606dcaa66a41001136d4c2af63f9aaa8f885a407a7f599131f6baaa2c1abdde329f3bd817d788958c4e322307153814f2bfac513a69331ec48b141bc6a58faf9eff69b5800e3d4132995ff34509abb139a5e417a8e2c93c5eb94555079e5144237b33d7ce0f699e1dffb19fb0437e3d60813c35a229676a7b1b122ad287e261cffdc40be3a9abc2326018bb7bc26c8f808dce87b22717009e9f13fbeea78e5572af4be94a4cc5fa021056f904b494b36721a41ab934d9fb4a7b58c23478f829d35682feaad0a2b6873ce1f8c6f720a379fbe28549d80b5530c3f122b7e86c3aadd9a7e50d6c85d62636c6192db63992d5f58410c6c4b407e7d30e8d4b0d0f19287890ed6041f3bc3621204608025049c375a5d5d67afd877f65e57ad107add0a61a31400c435dee46877d43684855c78e277c308f5fc85be38e5ee92d0113bb3cb07e2ec07332503c4d362cdbfbc860276a79ba32dde3263648c082f34dc3ba20e38a8c6ddb7cb49d00a4e2017d16be3dcad8fc04357718185b5317b7ca5f538e3e8ed04c2c2b174c26dd015e3d73a6e2434d52c5ded49ef62722771e520a32a16fb9de429f658872f3eb4ff3a2a22dc33e8f6d28b355b1114e10386d929ca2154209dfe4731cd62373890b30a1eb64768cad298ec58866f9b06779d212937a4374427358e995562f3dccc33db298746b8f584b509a4f6f3d43b02bf68d9194c7512e7b1823cfeed70df7de9778646c284e3a61fd23bb7e71b9107065ecce52f7a5716df146fc2c485924bb1ed038f35e8610d0d00a5b9b6e414142300ee161a325f73131d081d4c513bf7ccd107a5b8983293002e5d6faeebc2e4674c73b4f670314e05e42def6948272b6c18df852427a23040bc76daeab58aad1fcbe5b495e78a2efd48cca04664b7e5a2cefde51133b8fc9397f4af0a36042a4a7eeed12a54cf8ce61031f0637551b6781c90344d7868762c00cdbc442b848f2ee45e6c5a9f6155e7d925273b0c3edc17bebcffc245278ac094cde97f2359e5c921302ba613a9891d23987bbc6116be33c3fa2140811fcf49a6fea34f54339bb6acc080a24b679a29815955180933db4df8b41f9b56c6be8b0f21e196a30d02b5790a238c2ab4ce531a0d942bb52b2d768868f484eda2abb45fc9c2cef3a7bdca38a0ae5cd066b1d3c55e081d1345b6ff96aa0b7572735bef6e6d768a7d3a00b8add2aa2d31a718a71f6a20d1b0f023649c410ffc50cd9eb5a5bc95d5c7afd44be6f5d9e6c74bb304769b6b335289c131a5186ea71daa8314f9de7ad92c535ab5b3faa1b029169503c6cd0863ed98c1e9f704e147d1f062aac4429564ff7d80eb5458423276112f53e3dc079c4e69a4a700504238f81f21993f4ab6bce04daa58bda3f5e3bb322c4d835642abed037fc9a06b9e5fdaf8c5d6fa7d77de3e889893647714484c2ef3e9300f85d27e1922d5e0cf9cb48b424a255eec6a6a090cbaa467c2d563cbe4c505cccc8418df43b00cc42f418c570d5daaaba07d2f323cc85eafc01d3bd904e83a4db52cb6abcfeb98e3bff75752552bbb88bc51ec4816051fc8bfe680886a34ee1c5d5af769eb23883ef4953f00e7c6fad2d7513c62c7f6823181707a43779cb32578712b780351b14f662bc247c458b3ba20424f5776bcd21fbb3290f690cda01d071adc1524202bcd69a349e2bc16c361366bf426c2000e5dabfb51892ff646d8b3bbed9c1ad999cad98c79e4b661ebcabeb6cd26eb79708cb4f629c3271c7a55ef811b64c5e0695692c5299ca7c5b432226088b0174dfeb87195e31f57eed608fae0ed3fe500b53398b49ca0b24b04a6fc43a1570d3817244d2a2c15e12a135a862776a8d514796167952a9b46a559d3a64bb772b50ce13cffc56535d01a7133275cde45e0608c48d1009e5b985e8f38e0f480fa47869859746232ceec8ebd14ddd45b101363fdd3d85b4d4746f534000df3fdf47c909c826270cfe3df3ad0f866f30667803e8eeb36066e2cef2bfc8ce84764d335dd9a51fdb30c3909a81e11b24d65950e66437c2b20a50452802c0d9391880625dcddfe6786e4f10b53362d82082ce45a36ac5f5da85c2f27d5abf37e99738d6066b09fa4b043b5a7bae87725f21956e82d2e88eb6c03d4464c0648d0c8bd7ebf8ba463f852ee3031bb8c814a864e2181f134f399c967e37202a328ae5fd06ac0c0551d75db2abdd0063ed0be98921b0ba448676686223b478a596e013307b4533dd21d574b405cb78438b0265228baf28ead5cdb4fa05dfba714febb058b66ee83c5036d194cbd4f818e9ebec3729a2d1d6767f628fd751901eda97f47dd67dac7cbc0b94c17320c5cb1f09416c341b47964bbd3eed7cd4189e681659625332fdeee4f0871ef63051969a1a9aee334cedeb15a4955055154c530da63ae857b9a2e3f0352abb91f4930ac79588b0b7339ae1bd2939697dcb7f6360d8ece6ae4eaec782ddfd7ebc3cbdafb1464aa1186ef11b616bb6708181e5b6518c975598003ba3cd9bb7c62a491e6691d53acddd1aeeb590e174245aa56f51cb2ed3ebd1031804ee0eefb5287e9b8db66e48bfbfb346a9b3e99efcfe11fbbd0fd977bbf8d947c20fd6d80494957b1e048ef2ca7dd94cc8464e270d7f8127bc65b10af024ff8e1372ef2ce5ef84cd1b00fdf98457077a3b76db7f9ca0f0854388ae2502a8fd23441b482124edeaf2c5c63c0f5f0b28c54293355d3d75de76620684c4b89884ea5b654813914a7d7b2cd0dde43ec15a3bc27bf5f96cd87b194525a963a993abb573835bc8c23e1e001da0eaebecea8df9802075eafe300047d30aa6d568f7803c"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1614.758752] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:07 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:07 executing program 3: mq_open(&(0x7f0000000000)='\x00\x80\xf8\xff\xff\xff', 0x8c0, 0x2, &(0x7f0000000180)={0x2, 0x7fffffff, 0x8000, 0x2}) 03:42:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4040ae9e, &(0x7f00000000c0)={0x20, 0x1f, [0xc0000101, 0x0, 0x0, 0x0, 0xc0010015]}) 03:42:07 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfc, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x9, 0x4000, 0x8001, 0x0, 0x9, 0x4}}, 0x50) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900000000000092cdb3000600150000007bce080038000000000000000000000000000030e5958abb2b5c8f1f69e831109c6b57b22b5ab4a437fcbd9924c1da8abad01acfe98488f7c9c95b4030cecd129cb7e6e8fe0babd0339f039ccab794f681714efb67508c535ba2032984ee932f3595ea00a2eb4e9b66a0956b7b5fb7e4e456037393c7564a1d166c9e2a8c1aaa4aa11c", @ANYRESHEX=0x0, @ANYBLOB="08000300", @ANYRES16, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="00b9fcde", @ANYRES32, @ANYRES32, @ANYRES64, @ANYBLOB="08000b00290300040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b729576c16eb0425fb5c0206bc9f6330ab8c07a9d7cfe74c34ac49548dd31d9cea7c777b8403d2bdd3ea8ed93184262e1f367c3f1a37ce772a08a9d6739e88ffb23f6e172db876d4399d45222b24129000000", @ANYRES64=r5, @ANYBLOB="9fcbe3d2472d5f24171b60e68b1a059400692062b342705613b82d3dc19dc0f5ba667f3d337cd74797b63ca94cb030129d7a13ab74803721e77a436496037fca78b1719ff1d397ffdf1d04ba829de2d3c0435d14c69c00"], 0x70}}, 0x20000001) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x14a, {0x1, 0x3, 0x6}, 0x142, 0x0, r5, 0x1, 0x1, 0xebff, 0x1, 0x2, 0x5, 0x1f, 0x400, 0x1ff, 0x7fff, 0x9, 0x8001, 0x4, 0x100000000}}, 0xa0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000500009c000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040003000000000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="10000100000000002000060000000000"], 0x7c, 0x3) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x2, {0x6, 0x3, 0xffffffffffff7d2e, 0x52, 0x2965, 0xdb, {0x0, 0x80000000, 0x7fffffff, 0xffffffffffff869c, 0x1, 0xc7b, 0x7fffffff, 0x82, 0xb47, 0x400, 0xffffffff, 0x0, r5, 0x557ba5bf, 0x7728a7f3}}}, 0x90) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x37fd, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0, 0x0) 03:42:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x120, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x9, 0x4000, 0x8001, 0x0, 0x9, 0x4}}, 0x50) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900000000000092cdb3000600150000007bce080038000000000000000000000000000030e5958abb2b5c8f1f69e831109c6b57b22b5ab4a437fcbd9924c1da8abad01acfe98488f7c9c95b4030cecd129cb7e6e8fe0babd0339f039ccab794f681714efb67508c535ba2032984ee932f3595ea00a2eb4e9b66a0956b7b5fb7e4e456037393c7564a1d166c9e2a8c1aaa4aa11c", @ANYRESHEX=0x0, @ANYBLOB="08000300", @ANYRES16, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="00b9fcde", @ANYRES32, @ANYRES32, @ANYRES64, @ANYBLOB="08000b00290300040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b729576c16eb0425fb5c0206bc9f6330ab8c07a9d7cfe74c34ac49548dd31d9cea7c777b8403d2bdd3ea8ed93184262e1f367c3f1a37ce772a08a9d6739e88ffb23f6e172db876d4399d45222b24129000000", @ANYRES64=r5, @ANYBLOB="9fcbe3d2472d5f24171b60e68b1a059400692062b342705613b82d3dc19dc0f5ba667f3d337cd74797b63ca94cb030129d7a13ab74803721e77a436496037fca78b1719ff1d397ffdf1d04ba829de2d3c0435d14c69c00"], 0x70}}, 0x20000001) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x14a, {0x1, 0x3, 0x6}, 0x142, 0x0, r5, 0x1, 0x1, 0xebff, 0x1, 0x2, 0x5, 0x1f, 0x400, 0x1ff, 0x7fff, 0x9, 0x8001, 0x4, 0x100000000}}, 0xa0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000500009c000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040003000000000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="10000100000000002000060000000000"], 0x7c, 0x3) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x2, {0x6, 0x3, 0xffffffffffff7d2e, 0x52, 0x2965, 0xdb, {0x0, 0x80000000, 0x7fffffff, 0xffffffffffff869c, 0x1, 0xc7b, 0x7fffffff, 0x82, 0xb47, 0x400, 0xffffffff, 0x0, r5, 0x557ba5bf, 0x7728a7f3}}}, 0x90) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x37fd, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0, 0x0) 03:42:07 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x2001, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:07 executing program 3: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="10000040020006000107000000000000", 0x10, 0x3}]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000040)={0x0, 0xf4b}) 03:42:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, 0xa4, 0x2}, &(0x7f00000001c0)=0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) 03:42:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x3f00, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x1}, 0x40) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt(r2, 0x78, 0x0, &(0x7f0000001140)="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", 0x1000) socket$inet6(0xa, 0x2, 0x0) 03:42:08 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\x00', 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x10080) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000200)=0xfffffffc, 0x4) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:42:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x80fe, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xc22, 0x5}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xc0fe, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1616.237851] *** Guest State *** [ 1616.242035] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 1616.298380] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1616.346380] CR3 = 0x0000000000000000 [ 1616.361524] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1616.381615] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1616.398407] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1616.414971] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1616.432239] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1616.450900] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1616.469431] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1616.487496] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1616.506065] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1616.526363] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1616.544903] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 03:42:08 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfc00, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x80, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878236}, 0x9c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000100)=0x20) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={r8}) [ 1616.562286] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1616.595835] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1616.626158] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1616.653506] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1616.686173] Interruptibility = 00000000 ActivityState = 00000000 [ 1616.713147] *** Host State *** [ 1616.717347] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 1616.724559] RIP = 0xffffffff811b004f RSP = 0xffff88820dadf8c0 03:42:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfe80, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1616.764674] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1616.776430] FSBase=00007f4b63772700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 [ 1616.797366] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1616.810068] CR0=0000000080050033 CR3=00000000408d4000 CR4=00000000001426f0 [ 1616.826208] Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff874013e0 [ 1616.835979] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1616.847458] *** Control State *** [ 1616.853925] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000e2 [ 1616.877813] EntryControls=0000d1ff ExitControls=002fefff [ 1616.900050] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1616.909886] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 03:42:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfec0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1616.928771] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1616.968654] reason=80000021 qualification=0000000000000000 [ 1616.996762] IDTVectoring: info=00000000 errcode=00000000 [ 1617.011962] TSC Offset = 0xfffffc9c7b4d17d7 [ 1617.026935] TPR Threshold = 0x00 [ 1617.036502] EPT pointer = 0x00000000a01ec01e [ 1617.047732] Virtual processor ID = 0x0003 03:42:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xff00, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1617.506418] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:09 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x1000000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:09 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000100010000100000001005b789d0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r2, @ANYBLOB="08001b0000f7ff7a9a13c1910d00fa28d33400"], 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 03:42:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x20010000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:10 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:10 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:10 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)) 03:42:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x3f000000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:10 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000001180)='threaded\x00', 0x9) fallocate(r1, 0x3, 0x0, 0x42cbd) socket$inet6(0xa, 0x3, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fallocate(r0, 0x3, 0x0, 0xff) [ 1617.984875] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:10 executing program 3: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x4, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0xd7f00}], 0x1}, 0x0) 03:42:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xf5ffffff, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfc000000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfdfdffff, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfe800000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1618.788787] netlink: 'syz-executor.2': attribute type 25 has an invalid length. 03:42:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfec00000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:11 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:11 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x1) fcntl$setstatus(r0, 0x4, 0x46802) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x18000, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000000)) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x5, 0x10, 0xffffffffffffffff, 0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="8a00bec41157ac538f76dd558dd2d7929d454595d5ebf7541693516f44408cbe047d2b6d1b2f83701eb93d0156ab6bec69bb2146630ef2ff", 0x38}]) pipe2$9p(&(0x7f0000000100), 0x86000) [ 1619.239205] overlayfs: missing 'lowerdir' 03:42:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xff000000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1619.342813] overlayfs: missing 'lowerdir' 03:42:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffdfd, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x99a1, 0x20000000000036, 0x829, 0x0, 0x0, {0x3, 0x1000000, 0x1000000}, [@nested={0x2c7}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r3 = signalfd4(r2, &(0x7f0000000080)={[0x9]}, 0x8, 0x80000) ioctl$KDDELIO(r3, 0x4b35, 0x6f) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x400, 0xe97, 0x0, 0x4}, 0x10) [ 1619.545678] netlink: 39305 bytes leftover after parsing attributes in process `syz-executor.3'. 03:42:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:11 executing program 3: r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, &(0x7f00000001c0)=""/236, 0xec}, 0x2}, {{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000540)=""/190, 0xbe}, {&(0x7f0000000340)=""/39, 0x27}], 0x3}, 0x2}, {{&(0x7f0000000600)=@qipcrtr, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/4, 0x4}], 0x1, &(0x7f0000000700)=""/72, 0x48}, 0x401}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000800)=""/85, 0x55}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/166, 0xa6}], 0x3}}, {{&(0x7f0000001980)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001a00), 0x0, &(0x7f0000001a40)=""/192, 0xc0}, 0x6}, {{&(0x7f0000001b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/142, 0x8e}, {&(0x7f0000001c40)=""/199, 0xc7}], 0x2, &(0x7f0000001d80)=""/157, 0x9d}}, {{&(0x7f0000001e40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000002f00)=""/17, 0x11}, 0x7}], 0x7, 0x2000, &(0x7f0000003100)={0x0, 0x3938700}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) 03:42:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffff5, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1619.663359] overlayfs: missing 'lowerdir' 03:42:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:11 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000fa070000000000000000", @ANYBLOB="000000f1"], 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3d90", 0xfffffff0}], 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="64146f1778666c6f7070c41800"]) 03:42:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:12 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfc, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003300000000000000000000000000ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000000000"], 0x144}}, 0x0) 03:42:12 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:12 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) close(r0) [ 1620.112205] overlayfs: missing 'lowerdir' [ 1620.113913] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 03:42:12 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x43c100, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x0, 0x1}, 0x0, 0x6, 0x1f, {0x8, 0xc8}, 0x3, 0x2}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x412000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'wg2\x00', {}, 0x2}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0xa0040, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000200)={0x9096089ac1119846, 0x0, &(0x7f00000001c0)}) r3 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x2) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000280)={0x1f, "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"}) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x3, 0x8, "668f39", 0x7, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r3, 0x8000, 0x1, 0x5}) stat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() write$FUSE_DIRENTPLUS(r4, &(0x7f00000009c0)={0x290, 0xffffffffffffffda, 0x3, [{{0x6, 0x3, 0xfffffffffffffffd, 0xb8, 0x20, 0x4, {0x6, 0x5, 0x7, 0x1000, 0x1000, 0x5, 0x7, 0xdb73, 0x8, 0x1, 0x3, r5, r6, 0x200, 0x401}}, {0x6, 0x93, 0x1, 0x404, '$'}}, {{0x4, 0x3, 0x5, 0xffffffffffff3739, 0x5, 0x4, {0x6, 0x9, 0x9, 0x100, 0x20, 0x5eb, 0x81c, 0x14, 0x1, 0x4, 0x7ff, 0xffffffffffffffff, r7, 0x7, 0x5}}, {0x3, 0x0, 0x4, 0xa9, 'wg2\x00'}}, {{0x1, 0x0, 0x6, 0x0, 0x7, 0xff, {0x6, 0xfffffffffffffffe, 0x9, 0xffff, 0x9, 0x0, 0x1000, 0x6, 0x4, 0x7, 0xac, r8, r9, 0xf3, 0x6ee}}, {0x1, 0x0, 0x0, 0x2968}}, {{0x3, 0x0, 0x8001, 0x93, 0xc1, 0x4, {0x2, 0x4, 0x1, 0xb4b, 0x3, 0x1, 0x1f, 0x200, 0x9, 0x0, 0x10001, r10, 0x0, 0xfffffff9, 0x60000000}}, {0x1, 0x3000000000, 0x10, 0xc3a, '/dev/mISDNtimer\x00'}}]}, 0x290) 03:42:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x120, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:12 executing program 3: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet(0x2, 0x80001, 0x0) socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x8402) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a3c0200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 03:42:12 executing program 1: r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000e00", @ANYRES16=r1, @ANYBLOB="00032dbd7000ffdbdf25080000001c00078008000200d9ffffff08000100001000000800020008000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20044050) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @broadcast, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x44) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040), 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000014) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20800080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x5001) 03:42:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:12 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x2001, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1620.650624] overlayfs: missing 'lowerdir' 03:42:12 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:12 executing program 3: lsetxattr$security_ima(0x0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="bd2e83b62f7b9e0cbc5411520b3422585213ae1f8976c5529534cb9f44d0b6c2ec0e294b8f8c586224f046b057e30961a2ee57f4c6ebe1a1a44625b5e8ed3316ffbfae91b94fa2ceca9d1bd23455a3438f5ac0b6f12ed5d112e84c3f0145d73b683819c6db504ddb1dd01ba94b0a2c8d32d3b5648d7aed2cfbe18352b66e6f843e88f324f5655eaf7d8abf3838275e38674a85db34b16620bbc5cc06b942b53b15a33007c1c7418a936b23d57addce59371cbfb0e3d3561968807f0b267f5f58030300e0b60b3ab7b677a71afc8856303aa4760f2e44b1b0462bba718f193899a976ddad"], 0x9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x5, 0x800, 0x407) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8, 0x80000) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}, 0x1}}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9b0, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default]}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x10000}}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0x1, @empty, 0x72b}}, 0x0, 0x0, 0x29, 0x0, "074e9974a44f56d28e27e9352853996e6a7e65730e76ccc5b0f7307e43a9bea403afc3c57c9f6807a7bb47ed7f0972acebf607629dd29c8a3578c34277083efa223c710e5dfbd9685632ddcd8e245eb4"}, 0xd8) r3 = socket$inet6(0xa, 0x2, 0x248b2760) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x4100) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x7, 0x5, 0xfffffffffffffffd, 0x0, 0x400000, 0x8}) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f00000001c0), &(0x7f00000000c0)=0x68) getsockopt$inet6_int(r3, 0x29, 0x13, 0x0, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000380)={0xfffffffd, 0x0, 'client0\x00', 0x3, "f55f826858bcaf83", "0be7a1507378012a86191ea783b2fdfa34c0624632774add7e48b22bb12aa4de", 0x7, 0x8000}) 03:42:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000180)='./bus/file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0xffffffe1}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000080)='./bus/file1\x00', &(0x7f00000001c0)='overlay\x00', 0x2001071, &(0x7f0000000440)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@xino_off='xino=off'}], [{@smackfsroot={'smackfsroot', 0x3d, '!#].\':$*-,%%].+'}}]}) chdir(&(0x7f0000000200)='./bus\x00') rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') sysinfo(&(0x7f00000002c0)=""/46) 03:42:12 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x3f00, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1620.816443] overlayfs: missing 'lowerdir' 03:42:13 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x80fe, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1620.973695] overlayfs: failed to resolve './file0': -2 03:42:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000040)=""/55) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_TMR_SOURCE(r5, 0xc0045406) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x1b0001}, [@ldst={0xffffffbd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2000000}, 0x10}, 0x78) syz_open_dev$ptys(0xc, 0x3, 0x1) 03:42:13 executing program 1: unshare(0x2a000400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x549401, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x4e9) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0xc0400, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r0, 0x16}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x2956810, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000280)="383523432b706b95bb25aa2e64ffa9e7b9b12dbe819473d752f8833eb04d6935d24eabea9d7301f85921bbe19e1ea3318aa2bf04bfac7536b632443d41459f756639eb8d89e083a6673c243d8d0cfedf20de8844efe7121fa95ac111df83517001b8ce840c104cef82e023874254f53230", 0x71}], 0x1) 03:42:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0x7, 0x2, 0x400, 0xffffffda, 0x11, "32b6bd6d4e83fa727fa705081f4c11b2f37222"}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000280)={0xb, @raw_data="95b26760e83a710452a978544e3980b36b9f06b340e6f419c8c79965f54f5cfb2ebad6d421804809d5ea80b3a8b69441200e6ec53bc7975b5d3dd8997c806e4bc31b40382d31d7bf39643b447737a84c0896eba6d9260c3cf60f0aee6e89cf306a5d7cb3ef1864cc4c2d7be03f35cbdff751bb87fc8f16e3985019f54851fc3df8d9fec1bf40ed69ca2466bf70f09b876d694e2fd6037cee46fd341a9437451db615f2ca3b60a43f96fbb33e0ee60a736edab644ba7b22efa8c15de43231b2820c5c854f4ecfd1f3"}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065876469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6e66735f6578706f066c1cfcac"]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0xffffffff, 0x9, [0x7, 0x9, 0x7]}}) unlink(&(0x7f0000000200)='./bus/file0\x00') 03:42:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xc0fe, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:13 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:13 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:13 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x1000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) r5 = dup(0xffffffffffffffff) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd8, 0x0, 0x301, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r2, 0x3, 0x5e00, 0x2cbd) sendfile(r0, r1, 0x0, 0x13004) [ 1621.544325] overlayfs: missing 'lowerdir' [ 1621.549380] audit: type=1800 audit(1597635733.768:948): pid=24124 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16537 res=0 [ 1621.605629] overlayfs: unrecognized mount option "uppe‡dir=./file1" or missing value [ 1621.619567] audit: type=1804 audit(1597635733.798:949): pid=24124 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3446/file0" dev="sda1" ino=16537 res=1 03:42:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfc00, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1621.648751] audit: type=1804 audit(1597635733.808:950): pid=24124 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3446/file0" dev="sda1" ino=16537 res=1 03:42:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) tkill(r0, 0x15) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f35", 0x2}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="20ed00001100010800"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r5}, 0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0xc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 03:42:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000ff00200000000000e8ff00000016bc6367b0a44e281973fe9ed05f66ac4b21b53b8552bd1a643f26f69567c357a4b7139e8d8df4dca6320b8e2462ed52ad1fadc218e8e4855a995fb5ae7af85e4ae5faee83aadf6ee7b08752a4f79bcef6", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADLINK(r4, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 1621.775166] audit: type=1804 audit(1597635733.838:951): pid=24124 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3446/file0" dev="sda1" ino=16537 res=1 03:42:14 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x6, 0x0, [{0x118, 0x0, 0x5}, {0x2ae}, {0xbac, 0x0, 0x6}, {0x224, 0x0, 0xab}, {0x9b5, 0x0, 0x1ff}, {0x98d, 0x0, 0x6}]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @remote}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x3e) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 03:42:14 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfe80, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1621.968506] overlayfs: missing 'lowerdir' 03:42:14 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x4c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:14 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfec0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:14 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1622.489713] overlayfs: missing 'lowerdir' 03:42:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xff00, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:14 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bu']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1622.607943] overlayfs: missing 'workdir' 03:42:17 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x1000000, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:17 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bu']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x4e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) [ 1624.885868] overlayfs: missing 'workdir' 03:42:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x20010000, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x3f000000, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:17 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bu']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1625.207879] overlayfs: missing 'workdir' 03:42:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xf5ffffff, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:17 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./fil']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1625.332743] overlayfs: failed to resolve './fil': -2 03:42:17 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./fil']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfc000000, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1625.564991] overlayfs: failed to resolve './fil': -2 03:42:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfdfdffff, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:17 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xfffffffe, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @empty}, 0x48) 03:42:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfe800000, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xafa, 0x281) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x100c) 03:42:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfec00000, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:18 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./fil']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) ftruncate(r2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 03:42:18 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1626.105782] overlayfs: failed to resolve './fil': -2 03:42:18 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xff000000, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,meta']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1626.344443] overlayfs: unrecognized mount option "meta" or missing value 03:42:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:18 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,meta']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffdfd, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:18 executing program 1: r0 = socket(0x29, 0x5, 0x0) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xcf4, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000080)=0xffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0xded7, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="03d051a45386c6a643edc7d49ac65bd285a4c12f", 0x14, 0x3}, {&(0x7f0000000180)="eabd08cb9899ebb9f74360d15016ddda10a6a4548e0362a0558174da5b76a7e630ff53655e612990df31ebe835e4c9bf2ba83757de4d8da43367c207de22ea451e806c05684c6368d45b2f207d4e13323bf2b72ee760a7ef1536f6c17289ae5f04738146da68f81aee1d9421e8a8fad94904c7168c759820f4b8ab56da4e267ae963f9cf843863e67c63e3", 0x8b, 0x8}, {&(0x7f0000000240)="11bed0f106e26d08b526efd54b79f2977b37fa25328d8db1e7d428162c00bbc8e35c6debb815b26744d6d4c22c57ede04f97ade4dad69025b11765688c2f38c1783a5c70fad32e18a8468b513b5a8e377c57acbede1c18ffa70e7b6f9042d3006645907e6440eb952ea164781de611d3e0e5c2d389378393e1651eba437bf784d527dcc3c459aee63a335bcaa6f214ed772cfa2c0bffd91cfb9ab5e956c74b2973a4b981c1bca44ef6c60e6c36c582a59036f06dec2c93e5d8b0343d45a27a67721adb012dc8823c3d1b7879e1268dbaadf0e2feeaa7f71265acacb53923e4f0f2026d01f1337634668f", 0xea, 0x10000}], 0x289201b, &(0x7f00000003c0)='{-\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fe) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) close(r4) shutdown(0xffffffffffffffff, 0x0) [ 1626.656068] overlayfs: unrecognized mount option "meta" or missing value 03:42:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffff5, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:19 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6}}, 0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000080)={0x3, 0x5, [{0x3ff, 0x0, 0x9}, {0x2, 0x0, 0x20}, {0x8, 0x0, 0x101}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r4, r0) 03:42:19 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,meta']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:19 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f0000000180)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x9e, 0x0, &(0x7f0000000440)="7f7d2d021774dd6f179bb53022dc57704fa9a2f36badaa49f04571ec321f0d9e9c65ef5896b5d00311d3cbae49c819070b5db204542a07f712f3b949908434f9ddae9610ba7d7a3beaa64c1fd80daa6a633b901d2111c862efb4221eac12202cb1b20a7616014b54d76d9ff678cb1725bab4e535ac38edb10fd51fa5e402024683479b8873eb66c96b993331aaae60bceb70ee9276fd514b39c3a34df5d5"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000500)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x21db55a1}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}, 0x51) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000080e700010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) [ 1627.198909] overlayfs: unrecognized mount option "meta" or missing value [ 1627.238657] overlayfs: missing 'lowerdir' 03:42:19 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x6c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0xfc}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r3, r3, &(0x7f0000000480), 0xa198) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 03:42:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:19 executing program 3: mknod(&(0x7f00000001c0)='./bus\x00', 0xff, 0x0) clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2a020300) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x40) 03:42:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:20 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x26000097, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000140)="a2bb583d08ce711c7c15a5d625ea0e4064d0698d029dc63c03fe30a2721d5b1386258b7180754188abedc25ae736fb422346ad67a50d0be6e7b5bf54c3cad4c0a489dc916cb813304b31f6e7b4e61e73e97b71f1ebc5428805d5b533da", &(0x7f00000000c0)=""/39, &(0x7f00000001c0)="495fc58f4b8b001eec", &(0x7f00000002c0)="83eda8777051ae953aa50267ec24f35e6d7b95fcb3f9ff7cd60a8c0a00f295d6186a7a6a9a199b6680e2b69c70d0f2a8a8d1c013262d47ddfc3994bc2777f40465852c3eac3ec3d7a07458a83dcf0691d69e945b7a5fc00b42b32d104970e2f34a3b88191ecacb6f581b59e456a469aab9f3f7375eb3beef84fd65cb437bbccd372d6a9a296018f1333cf28fe401c0f3d0c1c813ded3ef006d4d833f6f553a8ad98568c22270f86b54c2e700af74ed2b33262dfae90f7368f1844a086bab1adc4507f42057f8b58f47fd5254e2bc934431333c990ca64056dfb1a184409c8fe53b9afae9", 0xffffff00, r4}, 0x38) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 03:42:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:20 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:20 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1628.265311] overlayfs: unrecognized mount option "metacopy" or missing value [ 1628.280613] overlayfs: missing 'lowerdir' 03:42:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:20 executing program 1: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}, 0x0, 0x7, 0x0, 0x3}}) r2 = dup3(r0, r1, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat(r4, &(0x7f0000000300)='./file0\x00', 0x2000, 0x80) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYRES16, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c00060003000000000000000c00060002000000000000000c00080005000000000000000c0004000600000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0xc0041}, 0x20004040) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r2}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$alg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="2f4034194614f36f6ac8c70af576f7536e1d6857f4eeadf67fd66b023aeee22f607fe2d1c7b2b5f110a8e0a995913c822692e7ea26e88b861c47fa08ace1e8b0c407090b840caaf90d341f911e12f5be830069da3430307283b28b38a09fed700c53b89f281cc22fb931247627dfb49e1cf743563fb09e23b2fa3859461b7b1b6e7bc95866aba3d98b002724fd3ed27a4bb198c9e23a3944d432de64952197fff100c4f7ecefbf5d2ef15afea85754146dbaba43f5f5bc60c7bcacb3", 0xbc}, {&(0x7f0000000100)="1774038d98d913a941ead67ee71c6d7928b0d545daf1666b57b459c5091286fd15e8458b16824bcf6e0be0cbdbc0ca2183116364de613c7497cabb7b1f969959235e43ef4107e7dd5542c66b26183c7d6636145bfd73008235a634098bf2020efb1b09ed1d", 0x65}, {&(0x7f0000000180)="e05a20e6f082f05d", 0x8}, {&(0x7f00000001c0)="77347a1523e782591183855e9873bfd1f3a18b3fdc4001c8ed746bca611876694a7f88bd349900", 0x27}, {&(0x7f0000000200)="c2c762a50fb04e811770afd1971123d82188f19c6d80ceeed5aaf90e7061196b15ca98b51a2f3e7dfeb08a0b798425", 0x2f}, {&(0x7f0000000780)="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", 0x100}], 0x6, &(0x7f00000003c0), 0x0, 0x20000005}, 0x20000044) r7 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) r8 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r8, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24002d35) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ustat(0x0, 0x0) 03:42:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:20 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:20 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1628.640298] overlayfs: unrecognized mount option "metacopy" or missing value [ 1628.649019] overlayfs: missing 'lowerdir' 03:42:20 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01fd2b020000000000007589a7f5b3e0ccd801f04788f8fe242e5f6bb924201a04a5ddcd5921769e0671defa7ff604ede0770ab101b8ee9f19fde5ad8a9ea67b5a1bc5d6a61ee51b2578cf"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xffff, 0x5, 0x1, 0x0, 0xd8, 0x9429, 0x0, 0x2, 0x80000000, 0x3, 0xfffffff8, 0x2, 0x7f, 0xfff, 0xb, 0x8, {0xffffffff, 0x1}, 0xb0, 0x4}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) 03:42:20 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7ff, 0x80040) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0x20) 03:42:20 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:20 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1628.796698] overlayfs: unrecognized mount option "metacopy" or missing value [ 1628.829477] overlayfs: missing 'lowerdir' 03:42:21 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x1, 0x1, 0x19be8319}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 03:42:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x74) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=o']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:21 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:21 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01fd2b020000000000007589a7f5b3e0ccd801f04788f8fe242e5f6bb924201a04a5ddcd5921769e0671defa7ff604ede0770ab101b8ee9f19fde5ad8a9ea67b5a1bc5d6a61ee51b2578cf"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xffff, 0x5, 0x1, 0x0, 0xd8, 0x9429, 0x0, 0x2, 0x80000000, 0x3, 0xfffffff8, 0x2, 0x7f, 0xfff, 0xb, 0x8, {0xffffffff, 0x1}, 0xb0, 0x4}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) 03:42:21 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000001000000000000ddbd0000000000800022"], 0x2a) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='group_id', &(0x7f00000000c0)='-\x00', &(0x7f0000000100)='/dev/fuse\x00', &(0x7f0000000140)='fuse\x00'], &(0x7f0000000340)=[&(0x7f00000001c0)='#-*\x00', &(0x7f00000002c0)='-\x00'], 0x1000) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000380), &(0x7f00000003c0)=0x4) [ 1629.225575] overlayfs: unrecognized mount option "metacopy=o" or missing value 03:42:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) msgget$private(0x0, 0x28b) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 1629.341580] overlayfs: missing 'lowerdir' 03:42:21 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=o']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1629.472194] rdma_op 000000001ef2f44d conn xmit_rdma (null) 03:42:21 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6c6f7765726469723d2e3a66696c0130"]) removexattr(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75087065726469723d2e2f6275732c776f726b2469723d2e2f6669a7041b9a09b3f6422fefdbf1a66c65312c6c6f77"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2, 0x14, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) lstat(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000380)={0xfd}) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./bus/file0\x00', 0xffffffffffffffff, 0x0, 0x4) setresuid(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) [ 1629.550602] overlayfs: missing 'lowerdir' [ 1629.578944] overlayfs: unrecognized mount option "metacopy=o" or missing value [ 1629.609553] overlayfs: failed to resolve 'fil0': -2 [ 1629.629003] overlayfs: unrecognized mount option "uperdir=./bus" or missing value [ 1629.674293] overlayfs: failed to resolve 'fil0': -2 [ 1629.681787] overlayfs: unrecognized mount option "uperdir=./bus" or missing value 03:42:22 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:22 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=o']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:22 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1630.140064] overlayfs: unrecognized mount option "metacopy=o" or missing value [ 1630.186890] overlayfs: missing 'lowerdir' 03:42:24 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01fd2b020000000000007589a7f5b3e0ccd801f04788f8fe242e5f6bb924201a04a5ddcd5921769e0671defa7ff604ede0770ab101b8ee9f19fde5ad8a9ea67b5a1bc5d6a61ee51b2578cf"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xffff, 0x5, 0x1, 0x0, 0xd8, 0x9429, 0x0, 0x2, 0x80000000, 0x3, 0xfffffff8, 0x2, 0x7f, 0xfff, 0xb, 0x8, {0xffffffff, 0x1}, 0xb0, 0x4}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) 03:42:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)) mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2004063, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x54, 0xe050, 0x0, {0x3f, 0x1000}, {0x0, 0x3}, @period={0x5a, 0xffff, 0xceb, 0x7, 0xff80, {0x6, 0x5, 0x0, 0x8}, 0x2, &(0x7f0000000080)=[0x7fff, 0x0]}}) 03:42:24 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:24 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x98) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) [ 1632.313567] overlayfs: missing 'lowerdir' 03:42:24 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) io_setup(0xa31, &(0x7f0000000040)=0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}, @in6={0xa, 0x0, 0x0, @dev}}}, 0x118) r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r3, 0x2008002) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) 03:42:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:24 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1632.548091] overlayfs: missing 'lowerdir' 03:42:24 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bu']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:24 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1632.678331] overlayfs: missing 'workdir' 03:42:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000080)="b805000000b94a0000000f01c10f00d4b93c0200000f320f01cb66b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f", 0x55}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000000)=""/97) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) clock_gettime(0x0, 0x0) 03:42:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:27 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:27 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bu']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xcc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:27 executing program 1: write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x80001ff}, &(0x7f0000000200), 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x100, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRESHEX=0x0, @ANYBLOB="08000300", @ANYBLOB="a09dbb059b2f3d44c7510839a80367bf89a53304a435a62512547061cb90f9ac51", @ANYRESHEX, @ANYRES32, @ANYBLOB="00b9fcde", @ANYRES32, @ANYRES64=r1, @ANYRES64, @ANYRES64=r5, @ANYRES64, @ANYBLOB="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"], 0x70}}, 0x20000001) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x14a, {0x1, 0x3, 0x6}, 0x142, 0x0, 0x0, 0x1, 0x1, 0xebff, 0x1, 0x2, 0x5, 0x1f, 0x400, 0x1ff, 0x7fff, 0x9, 0x8001, 0x4, 0x100000000}}, 0xa0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000500009c000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040003000000000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="10000100000000002000060000000000"], 0x7c, 0x3) setgid(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000080)) 03:42:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000000c0)) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffae623eff0000000001000000000000ffffffffffff"]) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x0, 0x8}}, "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", "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"}) [ 1635.415982] overlayfs: missing 'workdir' 03:42:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={[], [], @loopback}, 0x28da}}}, 0x84) r5 = getpgrp(0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x49090}, 0x5) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdbc0b92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x1) 03:42:27 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bu']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0xffffffffffffffff, r2) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1) [ 1635.607976] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1635.626252] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1635.699289] overlayfs: missing 'workdir' 03:42:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082c2088e69a5d6d000f10000c08000300", @ANYRES32=r6], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000059b00cb1fab56524660da8feda6c6e99db0385e84a3b4ff674f70be62ea880e11673b9bf890b5484528cf0892a4e968b444771ae06ee1d08ef641a416c8f0c4b057dedb65a925aaa5f9a8799f8b23788f6bffa9ae1a800c06cd58c86b167afc617d7a81696cc839cf4f8f89ec4061d4", @ANYRES16=r4, @ANYBLOB="ff830700000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 03:42:28 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./fil']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', 0x0) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1635.928723] overlayfs: failed to resolve './fil': -2 [ 1635.962031] audit: type=1804 audit(1597635748.188:952): pid=24681 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3460/cgroup.controllers" dev="sda1" ino=16306 res=1 03:42:28 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./fil']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:28 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x9176f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x3, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x59) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000002380)=0x1c) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0x80, {0x4000, 0xf000}}, "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", "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x80c00, 0x0) r5 = socket(0x10, 0x80002, 0x0) close(r5) connect$tipc(r5, &(0x7f0000004800)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0xffffffff}}, 0x10) r6 = socket(0x3, 0x36f66acf7fadabfc, 0x10000) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x30, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x0, 0x1}}) dup(r6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) splice(r4, &(0x7f00000000c0)=0x3ff, r5, &(0x7f0000000100)=0xfffffffffffffffd, 0x1, 0xd) 03:42:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', 0x0) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:28 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000000499c0000000000000000000a20000007000000000000000000000000000000000900010073797a300000000008000000120a010200000000da000000000000000500048009000200020000000000000009000100739a7a300000000008000378a33f1762fc24"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000005) 03:42:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1636.292590] audit: type=1804 audit(1597635748.518:953): pid=24701 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3461/cgroup.controllers" dev="sda1" ino=16540 res=1 [ 1636.294744] overlayfs: failed to resolve './fil': -2 03:42:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', 0x0) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:28 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./fil']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:28 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xf0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 03:42:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1636.632075] overlayfs: failed to resolve './fil': -2 03:42:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) rmdir(&(0x7f0000000580)='./bus/file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x10000}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) [ 1636.884033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1636.917679] veth0_to_batadv: mtu greater than device maximum 03:42:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket(0x100000000011, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000500)="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", &(0x7f0000000040)=@tcp6=r3, 0x2}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') r5 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2182130}, 0xc, &(0x7f00000001c0)={&(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x1440}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendfile(r1, r4, 0x0, 0x7ffff00e) 03:42:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(0x0, &(0x7f0000000340)) 03:42:29 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,meta']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1636.943889] overlayfs: filesystem on './bus' not supported as upperdir [ 1636.947477] veth0_to_batadv: mtu greater than device maximum 03:42:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xf0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:29 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40000032, r1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x7, 0x5, 0x4, 0x5, 0x2, 0x14, 0x8], 0x11}, 0x0, 0x11, 0x2, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0x17, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="700000001900000000000092cdb3000600150000007bce080038000000000000000000000000000030e5958abb2b5c8f1f69e831109c6b57b22b5ab4a437fcbd9924c1da8abad01acfe98488f7c9c95b4030cecd129cb7e6e8fe0babd0339f039ccab794f681714efb67508c535ba2032984ee932f3595ea00a2eb4e9b66a0956b7b5fb7e4e456037393c7564a1d166c9e2a8c1aaa4aa11c", @ANYRESHEX=0x0, @ANYBLOB="08000300", @ANYRES16=r2, @ANYRESHEX, @ANYRES32=r8, @ANYBLOB="00b9fcde", @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYBLOB="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", @ANYRES64=r9, @ANYBLOB="9fcbe3d2472d5f24171b60e68b1a059400692062b342705613b82d3dc19dc0f5ba667f3d337cd74797b63ca94cb030129d7a13ab74803721e77a436496037fca78b1719ff1d397ffdf1d04ba829de2d3c0435d14c69c00"], 0x70}}, 0x20000001) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x14a, {0x1, 0x3, 0x6}, 0x142, 0x0, r9, 0x1, 0x1, 0xebff, 0x1, 0x2, 0x5, 0x1f, 0x400, 0x1ff, 0x7fff, 0x9, 0x8001, 0x4, 0x100000000}}, 0xa0) getgroups(0x5, &(0x7f00000003c0)=[0x0, 0xee00, 0x0, 0x0, r9]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000006010002000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="0200020018b7d467d153c7010b75e605876bffc24522224e2562cbae6957a52e520740c7471dafb973081ae480ef3bdac0d6f2726050bed938e595dfc4fed6d1144e025d4f403db039a94078ed9b80a1f16eb531f04850a32fe441a7d3c7e5d43804970aa9fa53ab3c10ebdd0a30460b8f0e288d79a6a5d4", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08010000", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000200000000002000040000000000"], 0x84, 0x2) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r11, r0, 0x0, 0x20000000000000d8) 03:42:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1637.122705] overlayfs: unrecognized mount option "meta" or missing value 03:42:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='reno\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="0c2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 03:42:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1637.597181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:42:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(0x0, &(0x7f0000000340)) 03:42:29 executing program 1: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xc69498cdfcfdc0ca, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x5, 0x585100) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r1, 0xffffffffffffffff, 0xf, 0x6, r3}, 0x14) process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000640)=""/38, 0x26}, {&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/29, 0x1d}], 0x6, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/104, 0x68}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/3, 0x3}, {&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f0000000900)=""/208, 0xd0}], 0x5, 0x0) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000200)=""/156, &(0x7f00000002c0)=0x9c) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) r4 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x1000}, &(0x7f0000000340)=0x8) syz_open_procfs(0x0, &(0x7f0000000a80)='net/udp6\x00') 03:42:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, [], 0xfc}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x200000) write$tun(r3, &(0x7f0000000340)={@val, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e90081", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8e78cb", 0x0, 0x33, 0xff, @private2, @private1, [@fragment={0x2c, 0x0, 0x8, 0x1, 0x0, 0x1, 0x68}]}}}}}}}}, 0x72) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18102, 0x0) 03:42:30 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,meta']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x190) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(0x0, &(0x7f0000000340)) 03:42:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfc}}) 03:42:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) [ 1638.034442] overlayfs: unrecognized mount option "meta" or missing value 03:42:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x3, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000005000000000000001000000000060000", @ANYRES32=r3, @ANYBLOB="1100000000000000280012000c00010076657468"], 0x48}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x9, 0x1, &(0x7f0000000080)=0x5}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, r3}) 03:42:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) 03:42:30 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,meta']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x120}}) 03:42:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2001}}) [ 1638.419820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=24871 comm=syz-executor.3 [ 1638.444480] overlayfs: unrecognized mount option "meta" or missing value [ 1638.468474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=24871 comm=syz-executor.3 03:42:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f00}}) 03:42:31 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x21f6}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) epoll_create1(0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000e40)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad430100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe2314e887efecdcb7381ef4932cb0dcebea6d883a2c559b7a34db461b1974af360eace66cec40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be000000820102b1900000000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3d8747445763ecb0a7f2cd12bc34b0fc0271124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d44f4a087792991a7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830db4713e5ce6cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e078e3a638c4fdb8562eb85173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762e3b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b5d79746e20450a13d0dd35092250bbce4f618cad2375a34c7f15c3096f300004468cf1a00006f21ed0eb3681c696320d3251b7eab79ad8b126500419e25a94ce13a7a96deac79c90b8df10b1e364cf97eaa49fd22942a0fad0d814f230f954eec849b36a80306e8041f5e7e39e9442a30b53164aa0422da116cd5649f29d21d57163df6a760fbe5d134df32dc79c570c14077dde242472c75facd3cbe97df6efea9363c6d53f50680776c5e99990f7b4f3ae0d7896347cd6baa375e229e467f5dadc6c38c470a39e91f65ef2776ee75eec26a416dce537b104700020000000000008266490c00bf3167563be058c927109c37f347f2e012790b906d0a60f7dbe9b6c0808f6d431bca725ae95163f0c17eb0f1a3e398e831a0f933f5a0f0513ba362a4e9140faa4036b3901f530707cb2e0306721408d2e9b013f0d807794ffbbcede2a577117b92a28416884dcc83f07d16f9e5bbcdb57fb50409791e17ad46132aadd7cff07adfb0cc9f846c312f5ea67f88368810da9879d607dba5d5f0962cc029e4e9b4400a64d5865c1e5d31106e1bbabd02486830dfa8ffbff0692b93bc5acad2c4691e434c891ff3434232079cd08eabd7616fd7a6368da1a6e86544e02a127620e1314982e899cf8a55b9e66bbcf910302b2f137ad076a5d35030db05d423cf40a2a9607fad80e1eaf6603623c36d28fb21409540b39b5d47c5825fe25e27b771533acba4d7f90200"/1277, @ANYRESDEC, @ANYRESDEC, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) open(0x0, 0x0, 0x0) exit(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, {0xa, 0x4e20, 0x6, @remote, 0x1}, 0x1000, [0x40, 0xfff, 0x100, 0x8, 0x78b, 0x9, 0xffffffff, 0x10001]}, 0x5c) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00856064f1a80000020301010000000000000000000000000800010002000000"], 0x1c}}, 0x0) 03:42:31 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) 03:42:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x218) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r5 = socket(0x100000000011, 0x2, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4a8c31c", @ANYRES16=r10, @ANYBLOB="95c40000000000000000010000000000000002000000004c00180000000062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r10, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0xd0) ioctl$NBD_DO_IT(r0, 0xab08) 03:42:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nvram\x00', 0x404100, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$snapshot(r1, &(0x7f0000000600)=""/212, 0xd4) fcntl$setflags(r0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 1638.896399] overlayfs: unrecognized mount option "metacopy" or missing value 03:42:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80fe}}) [ 1638.944411] block nbd1: NBD_DISCONNECT [ 1638.949291] block nbd1: Send disconnect failed -32 [ 1638.961729] block nbd1: Disconnected due to user request. [ 1638.971453] block nbd1: shutting down sockets 03:42:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc0fe}}) 03:42:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfc00}}) 03:42:31 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @loopback, 0x0, 0x0, 0xff, 0x6a}}) dup3(r3, r4, 0x0) r5 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, @private0={0xfc, 0x0, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x7800, 0x8010}}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x1f, 0x80, 0x8, 0x1, 0x67, 0x81, 0x1, 0x81, 0x5, 0x4, 0x9, 0x3, 0x6}, 0xe) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000140)=0xfffffd8a) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x80, 0x6) close(r0) 03:42:31 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x11, &(0x7f00000000c0)={0x3d, 0x8, 0x5}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) 03:42:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfe80}}) 03:42:31 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x5a) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @private}, @in={0x2, 0x0, @dev}, @sco}) 03:42:32 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfec0}}) 03:42:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x2ca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000000200)="e9dcf125b250d08b7fece2bfc32df235ed69a687e9d5492e9c6b922b8b343ec103c53a0c4fcf22ce804395ba7a60dd0fc4afd66af8506aa910067d88142a26496b525c4ac7aadf20be6a33a6144c02eaa0020d26bb1cb435aac781b2101646bdf0ef434a95721f3be4b73a7d9e7b3fcf479bab4460a2aa64208c8fbac28ccea53f86ac25dd8853b070304979f272d1c11aab51b45ce58f662afd34c8c26a1f9baabfaf560eac56b6eb02b901bfd7df5b27308a47860e7ca22352c2977429dad1986b16cadf0cdd5ad4df00fe2c56cda7f21cdce9843db82892076f91172cdcf07d4600a3b93e08851dd76d4371f7a301b00c82790033", &(0x7f0000000000)=""/87, &(0x7f00000000c0)="fb9ee98badac6be4dc86cdb04bbb0b889444a243658083bf7177de5b25394503e151d5c6db34a17516a215395a32a51173805e776da76459331a3b25922f13a27403cecd051e6a757e3a59b0a9d76c84c9eb9574812538", &(0x7f0000000140)="9673dab04239447cec86427767243486c6cf036e91347cfddb79fb98df0e46a24afdd642e1e614a515a2", 0x8000, r2, 0x4}, 0x38) accept$alg(r0, 0x0, 0x0) 03:42:32 executing program 0 (fault-call:8 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={[], [], @multicast2}}}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/adsp1\x00', 0x0, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/236, 0xec}], 0x1) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x100000000011, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)={0xa4, 0x1, [], [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xfffa}, @pad1]}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname$llc(r5, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 1639.910336] overlayfs: unrecognized mount option "metacopy" or missing value 03:42:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff00}}) 03:42:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@v1={0x2, "2378e4e808b98e01d4fb67997cfd74"}, 0x10, 0x1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) r7 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000003c0)=0x1, 0x8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 1640.066162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1640.133108] IPv6: ADDRCONF(NETDEV_UP): vlan5: link is not ready [ 1640.147622] FAULT_INJECTION: forcing a failure. [ 1640.147622] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.165826] IPv6: ADDRCONF(NETDEV_UP): vlan6: link is not ready [ 1640.188173] CPU: 0 PID: 24969 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1640.196085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.205444] Call Trace: [ 1640.208050] dump_stack+0x1fc/0x2fe [ 1640.211688] should_fail.cold+0xa/0x14 [ 1640.215585] ? setup_fault_attr+0x200/0x200 [ 1640.219919] ? lock_acquire+0x170/0x3c0 [ 1640.223911] __should_failslab+0x115/0x180 [ 1640.228152] should_failslab+0x5/0xf [ 1640.231884] kmem_cache_alloc+0x277/0x370 [ 1640.236040] getname_flags+0xce/0x590 [ 1640.239940] user_path_at_empty+0x2a/0x50 [ 1640.244091] vfs_statx+0x113/0x210 [ 1640.247646] ? do_readlinkat+0x2f0/0x2f0 [ 1640.251704] ? vfs_write+0x3d7/0x540 [ 1640.255425] __se_sys_newlstat+0x96/0x120 [ 1640.259579] ? __se_sys_newstat+0x120/0x120 [ 1640.263908] ? vfs_write+0x393/0x540 [ 1640.267621] ? fput+0x2b/0x190 [ 1640.270816] ? ksys_write+0x1c8/0x2a0 [ 1640.274619] ? __ia32_sys_read+0xb0/0xb0 [ 1640.278678] ? posix_timer_fn+0x3d0/0x3d0 [ 1640.282829] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1640.287586] ? trace_hardirqs_off_caller+0x69/0x210 [ 1640.292605] ? do_syscall_64+0x21/0x620 [ 1640.296583] do_syscall_64+0xf9/0x620 [ 1640.300387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1640.305592] RIP: 0033:0x45d239 [ 1640.308781] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1640.327689] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1640.335398] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1640.342669] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1640.349937] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1640.357207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.364476] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1640.387933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:42:32 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)="2ccb", 0x2}], 0x1, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}], 0x70, 0x40800}], 0x1, 0x0) r5 = dup2(r1, r1) write$cgroup_netprio_ifpriomap(r5, 0x0, 0x0) close(r1) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r0, 0x1000000000015) 03:42:32 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:32 executing program 0 (fault-call:8 fault-nth:1): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xfc}}) [ 1640.635921] overlayfs: unrecognized mount option "metacopy" or missing value 03:42:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x2de) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:32 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000200)='\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472611c213d756e69782c00"]) 03:42:32 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@netrom, @bcast, @bcast, @remote, @null, @remote, @netrom, @default]}, &(0x7f0000000180)=0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x20110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x8, 0x73, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 03:42:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x120}}) 03:42:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) accept4(r2, &(0x7f0000000000)=@phonet, 0x0, 0x80800) [ 1640.806166] 9pnet_virtio: no channels available for device [ 1640.826643] 9pnet_virtio: no channels available for device 03:42:33 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x2, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x14c6) 03:42:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xc8}]}, 0x10) r1 = socket(0x1a, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x95191c88f744bf18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000003b00)="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", 0x1d1}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf32(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a8f05b1000000000000000000000000000000000000000000000000000000000000004600e2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f86a00000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ac76dc0b4a8cd61d500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033a7d7065195619c16da9490c99a43722f58ad60a251ed297253d45f39a25f91f001af9d1fb33a313d4f9c852d858777e87868014f737524ce307db863cb5f31cca3820b18766deac9fb332d7872ab16a8603595c7da3392a9ced71a47027959233e1d59107baa069d5e3f18483ff19e8ff31744"], 0x358) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x6, 0x1a, 0x6, 0x5]}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 03:42:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002c00270d000000000000000000000000ba79106afead0bd7ebb9c811e76ea9f8230a0dc41115cd6be658199cef01ffff0000819fc066ecfe46c073aadb8e4e14a701d1940f7467b61f843c7bd2a1d78577e5b7e6b52f44dc228ff746269ac447cbd87e0c6f24c58b1a7bb8500f5660b5fa4d67fb7e2e348001a76d9bf87d5852", @ANYRES32=r3, @ANYBLOB="0000f1ff000000000800000008000b00ff420000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x20004080) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250300000005000300040000005800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="140002007465616d300000000000000000000000140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="05000300020000004800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d616376746170000000140002006c6f00000000000000000000000000001400020073797a6b616c6c6572300000000000003400018008000300020000001400020076657468305f746f5f7465616d0000001400020076657468315f766c616e00000000000005000500400000001c00018008000100", @ANYRES32=r3, @ANYBLOB="080003000300000008000100", @ANYRES32=r3, @ANYBLOB="58000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1d5b9f5ea1a1c6585a80", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=r9, @ANYBLOB="1400020069703665727370616e3000000000000005000200060000000500020006000000"], 0x184}, 0x1, 0x0, 0x0, 0x50}, 0x0) [ 1640.988649] FAULT_INJECTION: forcing a failure. [ 1640.988649] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1641.000487] CPU: 0 PID: 25032 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1641.008376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1641.017739] Call Trace: [ 1641.020344] dump_stack+0x1fc/0x2fe [ 1641.022877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1641.024007] should_fail.cold+0xa/0x14 [ 1641.024024] ? mark_held_locks+0xf0/0xf0 [ 1641.024042] ? setup_fault_attr+0x200/0x200 [ 1641.043950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1641.044847] ? mark_held_locks+0xf0/0xf0 [ 1641.044863] ? mark_held_locks+0xf0/0xf0 [ 1641.044877] ? mark_held_locks+0xf0/0xf0 [ 1641.044897] __alloc_pages_nodemask+0x239/0x2890 [ 1641.054011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1641.057419] ? __save_stack_trace+0x72/0x190 [ 1641.057436] ? deref_stack_reg+0x134/0x1d0 03:42:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000ffdbdf250b000000050038000000000005002d0001000000080034000800000005003300020000000a000900aaaaaaaaaa26000008002c000080000008007c28afea6e3f"], 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x4000801) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="d4f86dcaf186d1710000c9672e19aa37ea050b30", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20000000400203) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r7, &(0x7f0000000240)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 1641.057458] ? __lock_acquire+0x6de/0x3ff0 [ 1641.057479] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1641.066147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1641.070309] ? mark_held_locks+0xf0/0xf0 [ 1641.070333] ? __might_fault+0x192/0x1d0 [ 1641.070349] ? _copy_from_user+0xd2/0x130 [ 1641.070366] ? get_pid_task+0xcd/0x190 [ 1641.070386] cache_grow_begin+0xa4/0x8a0 [ 1641.070402] ? setup_fault_attr+0x200/0x200 [ 1641.070416] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1641.070433] cache_alloc_refill+0x273/0x340 [ 1641.070450] kmem_cache_alloc+0x346/0x370 [ 1641.070466] getname_flags+0xce/0x590 [ 1641.070484] user_path_at_empty+0x2a/0x50 [ 1641.081708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1641.083359] vfs_statx+0x113/0x210 [ 1641.083374] ? do_readlinkat+0x2f0/0x2f0 [ 1641.083392] ? vfs_write+0x3d7/0x540 [ 1641.170552] __se_sys_newlstat+0x96/0x120 [ 1641.174707] ? __se_sys_newstat+0x120/0x120 [ 1641.179040] ? vfs_write+0x393/0x540 [ 1641.182759] ? fput+0x2b/0x190 [ 1641.185958] ? ksys_write+0x1c8/0x2a0 03:42:33 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=o']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1641.189770] ? __ia32_sys_read+0xb0/0xb0 [ 1641.193841] ? posix_timer_fn+0x3d0/0x3d0 [ 1641.198000] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1641.202761] ? trace_hardirqs_off_caller+0x69/0x210 [ 1641.207784] ? do_syscall_64+0x21/0x620 [ 1641.211776] do_syscall_64+0xf9/0x620 [ 1641.215593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1641.220786] RIP: 0033:0x45d239 [ 1641.223987] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1641.242879] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1641.250572] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1641.257824] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1641.265078] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1641.272331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.279585] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:33 executing program 0 (fault-call:8 fault-nth:2): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:33 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1641.350678] overlayfs: unrecognized mount option "metacopy=o" or missing value [ 1641.374555] overlayfs: unrecognized mount option "" or missing value [ 1641.387833] overlayfs: unrecognized mount option "" or missing value [ 1641.415534] FAULT_INJECTION: forcing a failure. [ 1641.415534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1641.427365] CPU: 0 PID: 25090 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1641.435249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1641.444598] Call Trace: [ 1641.447180] dump_stack+0x1fc/0x2fe [ 1641.450805] should_fail.cold+0xa/0x14 [ 1641.454681] ? check_preemption_disabled+0x41/0x280 [ 1641.459682] ? setup_fault_attr+0x200/0x200 [ 1641.464007] __alloc_pages_nodemask+0x239/0x2890 [ 1641.468749] ? __lock_acquire+0x6de/0x3ff0 [ 1641.472981] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1641.477809] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1641.482645] ? _copy_from_user+0xd2/0x130 [ 1641.486783] ? ____cache_alloc_node+0x156/0x1d0 [ 1641.491442] cache_grow_begin+0xa4/0x8a0 [ 1641.495486] ? check_preemption_disabled+0x41/0x280 [ 1641.500492] ____cache_alloc_node+0x170/0x1d0 [ 1641.504970] ? check_preemption_disabled+0x41/0x280 [ 1641.509971] kmem_cache_alloc+0x1e4/0x370 [ 1641.514105] getname_flags+0xce/0x590 [ 1641.517893] user_path_at_empty+0x2a/0x50 [ 1641.522029] vfs_statx+0x113/0x210 [ 1641.525553] ? do_readlinkat+0x2f0/0x2f0 [ 1641.529597] ? vfs_write+0x3d7/0x540 [ 1641.533315] __se_sys_newlstat+0x96/0x120 [ 1641.537447] ? __se_sys_newstat+0x120/0x120 [ 1641.541755] ? vfs_write+0x393/0x540 [ 1641.545455] ? fput+0x2b/0x190 [ 1641.548629] ? ksys_write+0x1c8/0x2a0 [ 1641.552414] ? __ia32_sys_read+0xb0/0xb0 [ 1641.556460] ? posix_timer_fn+0x3d0/0x3d0 [ 1641.560594] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1641.565337] ? trace_hardirqs_off_caller+0x69/0x210 [ 1641.570348] ? do_syscall_64+0x21/0x620 [ 1641.574308] do_syscall_64+0xf9/0x620 [ 1641.578097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1641.583279] RIP: 0033:0x45d239 [ 1641.586465] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1641.605360] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 03:42:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x2ea) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2001}}) 03:42:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x40000000015, 0x805, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket(0x40000000015, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = dup2(r0, 0xffffffffffffffff) write(r5, &(0x7f0000000300)="82e555dc86d5b4b082432234033ba124a03f185d61e241258ceef68688cb928515918de3c6ad25f940654bec86930a090c612e6b5cc0813c487110985e5ab7d91dfad17916b5de3f6566843ea7284675470e66d13b8ee2baaa1b7dba44d487764dbd96cb2137e2f419b399a5c542d2d9a0fb451ccdfed465b748d630", 0x7c) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c, 0x0}, 0x0) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f00000002c0)=0xfffffffffffffff9) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x6) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000280)={0x66}) sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c, 0x0}, 0x0) accept(r2, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000001000010402000000fdffffff00000000", @ANYRES32=r7, @ANYBLOB="0000000012000000340012800e00010069703665727370616e000000200002800600180009000000060018000900000005001600010000000400120008000a00", @ANYRES32=r7, @ANYBLOB="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"], 0x5c}}, 0x8810) [ 1641.613059] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1641.620320] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1641.627570] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1641.634820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1641.642071] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:34 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=o']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3f00}}) 03:42:34 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000080)=0xa4b) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0xe000008, &(0x7f0000000180)=[{&(0x7f0000000000)="94eb98c5f97e2c2a4a02408ccb88a96a52bbf810f9b72aa17225a6c6bcb1f56bc51ce9668fee7066d816af4c6bf88f7adff4c49f3dc6e467603e98d004b63403d6570cf7d036784cb892eb7750", 0x4d}, {&(0x7f00000003c0)="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", 0x574}], 0x2}}], 0x400000000000398, 0x1c00) socketpair(0x6, 0x80000, 0x400, &(0x7f0000000340)={0xffffffffffffffff}) bind$bt_hci(r3, &(0x7f0000000940)={0x1f, 0x4}, 0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private1, @in=@dev}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f00000000c0)=0xe8) [ 1641.872678] overlayfs: unrecognized mount option "metacopy=o" or missing value 03:42:34 executing program 0 (fault-call:8 fault-nth:3): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80fe}}) 03:42:34 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=o']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = socket(0x100000000011, 0x4, 0x6ab) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) close(r5) set_mempolicy(0x4000, &(0x7f0000000000)=0x107f509a, 0x101) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffc, 0x0, @local, @ipv4={[], [], @empty}, 0x0, 0x700}}) kcmp(0x0, 0x0, 0x2, r6, r7) [ 1642.109503] overlayfs: unrecognized mount option "metacopy=o" or missing value 03:42:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xc0fe}}) 03:42:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x12b) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) [ 1642.244695] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1642.267224] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1642.306765] FAULT_INJECTION: forcing a failure. [ 1642.306765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1642.319931] CPU: 0 PID: 25132 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1642.327840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1642.337280] Call Trace: [ 1642.339878] dump_stack+0x1fc/0x2fe [ 1642.343506] should_fail.cold+0xa/0x14 [ 1642.347378] ? lock_acquire+0x170/0x3c0 [ 1642.351346] ? setup_fault_attr+0x200/0x200 [ 1642.355665] __alloc_pages_nodemask+0x239/0x2890 [ 1642.360407] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1642.365403] ? __alloc_pages_nodemask+0x1b43/0x2890 [ 1642.370428] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1642.375265] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1642.380088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1642.384921] ? _copy_from_user+0xd2/0x130 [ 1642.389063] ? ____cache_alloc_node+0x156/0x1d0 [ 1642.393729] ? cache_grow_begin+0x64/0x8a0 [ 1642.397957] cache_grow_begin+0xa4/0x8a0 [ 1642.402023] fallback_alloc+0x213/0x2e0 [ 1642.405988] kmem_cache_alloc+0x1e4/0x370 [ 1642.410150] getname_flags+0xce/0x590 [ 1642.413962] user_path_at_empty+0x2a/0x50 [ 1642.418102] vfs_statx+0x113/0x210 [ 1642.421623] ? do_readlinkat+0x2f0/0x2f0 [ 1642.425672] ? vfs_write+0x3d7/0x540 [ 1642.429393] __se_sys_newlstat+0x96/0x120 [ 1642.433543] ? __se_sys_newstat+0x120/0x120 [ 1642.437856] ? vfs_write+0x393/0x540 [ 1642.441550] ? fput+0x2b/0x190 [ 1642.444734] ? ksys_write+0x1c8/0x2a0 [ 1642.448525] ? __ia32_sys_read+0xb0/0xb0 [ 1642.452579] ? posix_timer_fn+0x3d0/0x3d0 [ 1642.456725] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1642.461462] ? trace_hardirqs_off_caller+0x69/0x210 [ 1642.466462] ? do_syscall_64+0x21/0x620 [ 1642.470430] do_syscall_64+0xf9/0x620 [ 1642.474240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1642.479429] RIP: 0033:0x45d239 [ 1642.482612] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:42:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x2f8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) epoll_create1(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x2, 0x8}, 0xc) epoll_create1(0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000c500", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830af41b2152000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) listen(r0, 0x0) 03:42:34 executing program 1: r0 = gettid() setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="da"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 03:42:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xfc00}}) 03:42:34 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1642.501497] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1642.509186] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1642.516436] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1642.523688] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1642.530949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1642.538211] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c [ 1642.676178] audit: type=1804 audit(1597635754.898:954): pid=25155 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir566078842/syzkaller.4lYHFx/3475/cgroup.controllers" dev="sda1" ino=16043 res=1 03:42:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xfe80}}) 03:42:35 executing program 0 (fault-call:8 fault-nth:4): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:35 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000240)={0x467c8dd1238e77c8, 0x0, 0x102, 0x3, {0x50000, 0xff, 0x6, 0x8000}}) io_setup(0x2008, &(0x7f0000000600)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = socket(0x100000000011, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000180)={0xff, 0x7, "b05f7bc7291d3c0c05d2f554b8128d22ce1644469d59999a65028233fff46ae6", 0xff, 0x3ff, 0x6, 0x5, 0x100}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r5, 0xb1a, 0x8, 0x1}) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000100)="7359796a425387315d6fdc3966095df8deecabb88cee2ab69788723ed49456d1feff284345bbe78a88fbe9b5d38fc2d097315a675529f73e6edd51b7d4f1742999d30107", 0x44) 03:42:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xfec0}}) 03:42:35 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) pipe(0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000001010400000000000000000000000008000200ac1514bb0c00028005000100000000001800028006000340000100000c0002800500010000000000080007400000000504000480"], 0x5c}}, 0x0) [ 1642.975856] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1643.024517] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1643.038790] FAULT_INJECTION: forcing a failure. [ 1643.038790] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.052660] CPU: 1 PID: 25190 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1643.060566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.069927] Call Trace: [ 1643.072530] dump_stack+0x1fc/0x2fe [ 1643.076176] should_fail.cold+0xa/0x14 [ 1643.080074] ? setup_fault_attr+0x200/0x200 [ 1643.084406] ? lock_acquire+0x170/0x3c0 [ 1643.088396] __should_failslab+0x115/0x180 [ 1643.092639] should_failslab+0x5/0xf [ 1643.096360] kmem_cache_alloc+0x277/0x370 [ 1643.100513] __d_alloc+0x2b/0xa10 [ 1643.103977] d_alloc+0x4a/0x230 [ 1643.107270] d_alloc_parallel+0xeb/0x19e0 [ 1643.111438] ? lock_acquire+0x170/0x3c0 [ 1643.115420] ? __d_lookup_rcu+0x6b0/0x6b0 [ 1643.119586] ? __lockdep_init_map+0x100/0x5a0 [ 1643.124080] ? __lockdep_init_map+0x100/0x5a0 [ 1643.128564] __lookup_slow+0x18d/0x4a0 [ 1643.132450] ? follow_dotdot_rcu+0x1040/0x1040 [ 1643.137045] ? lookup_fast+0x4e9/0x1080 [ 1643.141030] ? walk_component+0x798/0xda0 [ 1643.145195] walk_component+0x7ac/0xda0 [ 1643.149181] ? lookup_fast+0x1080/0x1080 [ 1643.153249] ? walk_component+0xda0/0xda0 [ 1643.157412] path_lookupat+0x1ff/0x8d0 [ 1643.161308] ? path_mountpoint+0xac0/0xac0 [ 1643.165562] ? ____cache_alloc_node+0xf4/0x1d0 [ 1643.170157] filename_lookup+0x1ac/0x5a0 [ 1643.174223] ? filename_parentat+0x590/0x590 [ 1643.178642] ? __phys_addr_symbol+0x2c/0x70 [ 1643.182970] ? __check_object_size+0x17b/0x3d1 [ 1643.187569] ? getname_flags+0x25b/0x590 [ 1643.191635] vfs_statx+0x113/0x210 [ 1643.195179] ? do_readlinkat+0x2f0/0x2f0 [ 1643.199240] ? vfs_write+0x3d7/0x540 [ 1643.202969] __se_sys_newlstat+0x96/0x120 [ 1643.207214] ? __se_sys_newstat+0x120/0x120 [ 1643.211530] ? vfs_write+0x393/0x540 [ 1643.215240] ? fput+0x2b/0x190 [ 1643.218423] ? ksys_write+0x1c8/0x2a0 [ 1643.222206] ? __ia32_sys_read+0xb0/0xb0 [ 1643.226251] ? posix_timer_fn+0x3d0/0x3d0 [ 1643.230396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1643.235145] ? trace_hardirqs_off_caller+0x69/0x210 [ 1643.240170] ? do_syscall_64+0x21/0x620 [ 1643.244138] do_syscall_64+0xf9/0x620 [ 1643.247939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1643.253123] RIP: 0033:0x45d239 [ 1643.256308] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:42:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, @xdp={0x2c, 0x2, 0x0, 0x2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0x3ff, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000200)='veth1_macvtap\x00', 0x69, 0x7fff, 0x3f}) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', r8}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x8, 0x200, 0x65, @private2, @remote, 0x40, 0x8, 0x81, 0x10000}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080), 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf2519000000340001801400020073797a5f74756e00000000000000000008000300020000001400020069705f767469300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="880001801400020076657468305f746f5f7465616d0000001400020064756d6d793000000000000000000000140002006261746164765f736c6176655f300000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006261746164765f736c6176655f31000014000200626f6e64300000000000000000000000080003000000000030000180140002006970766c616e31000000000300000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800010001b16d94f21adaa2d638d5632c8fbd27cf848696cd4cb8c821c706532fc3", @ANYRES32=r3, @ANYBLOB="44000180140002006970766c616e3000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="140002006e657470636930000000000000000000080003000300000008000100", @ANYRES32=r10, @ANYBLOB="0abcddda61f2f4b5322af9c49b3fcf7cad8e431d5499fea3a3dc20cb11bd2455e437432fe0f3ffffff000000000000000048ac017e24d7d4a9da88920de17a33d1b96379f981a4306a79ae4dc2b2b38116316c2101eb18b2dff444964572082bd5d9dac26a0771dbb14336aac03829cf7d9f644fa428f6da86b12532881e4fb702cffa9f886ec955dc7beb39b22d933514507206eda1884dab5640a557211d912f566cac1502e81da9c5c60653f9ab27c77e1984ad381e6c87f92f12533f0a4c93507f09745cacc3b2f7d7fd9bf8"], 0x150}, 0x1, 0x0, 0x0, 0x2004c000}, 0x20000800) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) r11 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x70, @private0, @ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x9}}) kexec_load(0x1, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="3d0331de682cb682d68ca6e400a94c908f98d2f72f85b445cfae853c", 0x1c, 0xd8, 0x10001}], 0x150000) 03:42:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xff00}}) [ 1643.275198] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1643.282891] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1643.290147] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1643.297402] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.304656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1643.311907] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:35 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x2fa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:35 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:35 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) fcntl$dupfd(r1, 0x0, r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r1, 0x0, 0x12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x403, &(0x7f0000000240)={[{@xino_on='xino=on'}, {@index_off='index=off'}], [{@hash='hash'}, {@fsname={'fsname', 0x3d, 'cpuset.sched_relax_domain_level\x00'}}, {@dont_measure='dont_measure'}, {@uid_lt={'uid<', r6}}, {@euid_eq={'euid', 0x3d, r8}}, {@uid_eq={'uid', 0x3d, r10}}, {@permit_directio='permit_directio'}, {@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) 03:42:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$xdp(r1, &(0x7f0000002640)={&(0x7f0000000000)={0x2c, 0x1, r5, 0x23}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000140)="71d4d05d20930db592f1c709c93f0f9f6869dcb25abf15d2483f3b0da2bfade0ba396f6f7c2b451ed8007a4b0c6143009374f9d44c5d9ebfbf6691b2dadd7a8ab6010691d977966489dc9f9ab7620d1fdf7263e14a08bbf7bb1a24faa30566452005b1b6d223255b955cecca927c74f3f645e92b2b3f122a1edccc916dd8b8e7471c5a82318e72b39aaf18a549107fcbc66d4214732f78255454c94d7a6b1d353e5ccb641e093cfd917699531063a2b357b3b269765507362994e463546028682f", 0xc1}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="465c821556776977e1218d0e2416ec40d22c00af94eb0278852c410bf5f4283a1e7defccda2a6943d6b6ae5b0fa8a5224d94ee3e629c742713e725febbabb5b530e12fcbe8e4fbf12ffc97272dfca63b8c249aaaae991a2e4813d5cae9f0f34889db09064335d9af6111b55dd35fc0", 0x6f}, {&(0x7f00000000c0)}, {&(0x7f00000012c0)="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", 0xffffffffffffffcd}, {&(0x7f00000022c0)="cf32d356d04328b9fbdb6f5f25988e8e217d8cbb27ed43dfa4882cb7a18581cb95fd4355753ad773d88491de4ce70ab67b224890cad66249c1ec67c0737653e1e9ea03dd3fb89e11e239826c7f9ff19a357098c7f7f2e5f3ae968f3b49e5104a0069bdec6db718083ba980dda3c0106ac43a76b4b3d926764e1d40f887e187127f6255b4799be9d48abe850b75802ff8076e9f0c5908b3002dcdbfde31f7c3d298d7049fbed8fcb672ed4636223f11765a57b12418f882e0fae72a3a5cd6781f7269691a0fbb9ae0c7cacb46b57745f652ec09a9d591931e713a", 0xda}, {&(0x7f00000023c0)="66735f673c68a2c41eae", 0xa}, {&(0x7f0000002400)="b4c2050dea3989a0c484fdaea92a53039405252404f046f0f9d9dbb1951730d7ce07c3a7057bff7584a589592b590c2bff41e85d4ab7c7051604029f00"/75, 0x4b}, {&(0x7f0000002480)="359a43c8fab539c40f181dd6e703454159b9d3ff6ea52f616c52073a7cad381720a83735738138414297d5443c1e1fe010acfa9b0e411a21140c772bffe99c4550ec9e7f55ff4debcfc03e759c329d4fb79cc3a160aa54d271f24e124d8bf6452d7aa3a9b0b7729a269d24d781af47d39d4b257334e26cad801cb25e5593957f7c47f4b06cf3da2793114bb1814d430015345cb03116330f793254fdd239c8483193dcebaaf5b1813bf783d9aae5136b515819f57b3996c439a9c9d97e0289cd0b38ded5b18cbbe97f450dad32f40ce5037d7ea3bc0c6de1452c55b04967ed1a1123eea8", 0xe4}], 0x9, 0x0, 0x0, 0x10}, 0x2000c051) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macvlan1\x00', 0x10) sendto$inet(r0, 0x0, 0x20000, 0x20020001, &(0x7f0000000040), 0x10) 03:42:35 executing program 0 (fault-call:8 fault-nth:5): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000440)={0x101, 0x1, &(0x7f0000000200)=[0x20], &(0x7f0000000300)=[0x2, 0xbb8, 0x6f1, 0x3], &(0x7f0000000340)=[0x3ff, 0x0, 0x0], &(0x7f00000003c0), 0x0, 0x5}) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b646737053bdcc3d29a65312c75707065726469723d2e2f66696c6530"]) socket(0x400000000000010, 0x802, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000140)) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x101000, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000180)=0x67180000) [ 1643.494241] new mount options do not match the existing superblock, will be ignored 03:42:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfc}}) 03:42:35 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1643.718069] overlayfs: unrecognized mount option "workdg7;ÜÃÒše1" or missing value [ 1643.758564] FAULT_INJECTION: forcing a failure. [ 1643.758564] name failslab, interval 1, probability 0, space 0, times 0 03:42:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x120}}) [ 1643.799175] CPU: 0 PID: 25216 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1643.807096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.816454] Call Trace: [ 1643.819059] dump_stack+0x1fc/0x2fe [ 1643.822700] should_fail.cold+0xa/0x14 [ 1643.826614] ? setup_fault_attr+0x200/0x200 [ 1643.830960] __should_failslab+0x115/0x180 [ 1643.835207] should_failslab+0x5/0xf [ 1643.838931] kmem_cache_alloc+0x277/0x370 [ 1643.843089] mb_cache_entry_create+0xb5/0x980 03:42:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x2001}}) [ 1643.847598] ext4_xattr_get+0x57f/0x9c0 [ 1643.851590] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1643.856273] ? xattr_resolve_name+0x26e/0x3d0 [ 1643.860778] ? ext4_xattr_trusted_set+0x40/0x40 [ 1643.865543] vfs_getxattr+0x1ce/0x320 [ 1643.869352] ? xattr_list_one+0x120/0x120 [ 1643.873509] ? lookup_one_len+0x190/0x190 [ 1643.877671] ovl_check_metacopy_xattr+0x93/0x130 [ 1643.882431] ovl_lookup_single+0x304/0x920 [ 1643.886677] ovl_lookup_layer+0x3bd/0x440 [ 1643.890836] ? check_preemption_disabled+0x41/0x280 [ 1643.895865] ? ovl_lookup_single+0x920/0x920 [ 1643.900287] ? d_alloc_parallel+0x744/0x19e0 [ 1643.904710] ovl_lookup+0x44b/0x1a00 [ 1643.908433] ? lock_downgrade+0x720/0x720 [ 1643.912602] ? ovl_path_next+0x2d0/0x2d0 [ 1643.916696] ? __lockdep_init_map+0x100/0x5a0 [ 1643.921204] ? __lockdep_init_map+0x100/0x5a0 [ 1643.925715] __lookup_slow+0x246/0x4a0 [ 1643.929618] ? follow_dotdot_rcu+0x1040/0x1040 [ 1643.934218] ? lookup_fast+0x4e9/0x1080 [ 1643.938209] ? walk_component+0x798/0xda0 [ 1643.942377] walk_component+0x7ac/0xda0 03:42:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x3f00}}) [ 1643.946461] ? lookup_fast+0x1080/0x1080 [ 1643.950530] ? walk_component+0xda0/0xda0 [ 1643.954687] path_lookupat+0x1ff/0x8d0 [ 1643.958580] ? path_mountpoint+0xac0/0xac0 [ 1643.962827] ? ____cache_alloc_node+0xf4/0x1d0 [ 1643.967425] filename_lookup+0x1ac/0x5a0 [ 1643.971493] ? filename_parentat+0x590/0x590 [ 1643.975916] ? __phys_addr_symbol+0x2c/0x70 [ 1643.980249] ? __check_object_size+0x17b/0x3d1 [ 1643.984853] ? getname_flags+0x25b/0x590 [ 1643.988935] vfs_statx+0x113/0x210 [ 1643.992488] ? do_readlinkat+0x2f0/0x2f0 [ 1643.996558] ? vfs_write+0x3d7/0x540 [ 1644.000298] __se_sys_newlstat+0x96/0x120 [ 1644.004463] ? __se_sys_newstat+0x120/0x120 [ 1644.008799] ? vfs_write+0x393/0x540 [ 1644.012535] ? fput+0x2b/0x190 [ 1644.015747] ? ksys_write+0x1c8/0x2a0 [ 1644.019560] ? __ia32_sys_read+0xb0/0xb0 [ 1644.023629] ? posix_timer_fn+0x3d0/0x3d0 [ 1644.027792] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1644.032659] ? trace_hardirqs_off_caller+0x69/0x210 [ 1644.037688] ? do_syscall_64+0x21/0x620 [ 1644.041675] do_syscall_64+0xf9/0x620 [ 1644.045495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1644.050686] RIP: 0033:0x45d239 [ 1644.053881] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1644.055067] overlayfs: unrecognized mount option "workdg7;ÜÃÒše1" or missing value [ 1644.072788] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1644.072952] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1644.072960] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1644.072968] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1644.072976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1644.072984] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x80fe}}) 03:42:36 executing program 0 (fault-call:8 fault-nth:6): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:36 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="740e88aa31d6accca662455366aa7c5d", 0x10) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010068686600140002000800062000eeffff070005"], 0x40}}, 0x0) 03:42:36 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:36 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', 0x0) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1644.356176] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 03:42:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xc0fe}}) [ 1644.422290] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 03:42:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6486, @null, @rose={'rose', 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x218}, 0x1c) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x7, 0xeb3e}, @sack_perm, @mss={0x2, 0x4}, @timestamp], 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x174, 0x11, 0x0, 0x1, @range={{0xa, 0x1, 'range\x00'}, @val={0x164, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x158, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x66, 0x1, "c1c8dea721d230cc0de93da250eca6a187fc155036d2b3e1690f85d5ba38c534f1db08378bdd1827ccd07bfc338e322a932c7bf64dd396fd683b0853db01c8277f6823018aad11385fa34705fa4f7fe91984fa15350ba7a934f6f315b18ae575ebdf"}, @NFTA_DATA_VALUE={0x70, 0x1, "38fee7b8717aca4860647881eeced52b93ea446c2564fe0b7d1c05821a07ae31413dc939a626fc0579cff24dbf43fd17c1b29ac4833da8994057c2e7bb912623af61d662409a973312f697628e75bbc81733c8995acdae1c36ac6d8a5c9b07ad819fd4af0d8cad611e303747"}, @NFTA_DATA_VALUE={0x77, 0x1, "910b2ecda52ba84d3166f50a8edcc9d84b7467813ca06669f01c4101cba250b8e4050d8d4e2bc8d137c12560520bd2051265c5be4094d85ef250faf9e30f9388dc370fbcb0e1d2c7041d53c57cfe9ee7841a9dd176ef028618c7dd3b64a2bca4533554508836e7c27bd3d9cef28e1ec66ab361"}]}, @NFTA_RANGE_OP={0x8}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xf8}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_USERDATA={0xb, 0xd, 0x1, 0x0, "58345d120e7ef1"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0x8) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x40c82) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000380)={0x1, 0x0, 0x101, 0x5, {0xfff, 0x1f, 0xa8e, 0x3}}) [ 1644.524176] FAULT_INJECTION: forcing a failure. [ 1644.524176] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.546977] CPU: 1 PID: 25271 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1644.554885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.564248] Call Trace: [ 1644.566861] dump_stack+0x1fc/0x2fe [ 1644.570509] should_fail.cold+0xa/0x14 [ 1644.574409] ? setup_fault_attr+0x200/0x200 [ 1644.578751] __should_failslab+0x115/0x180 [ 1644.582996] should_failslab+0x5/0xf [ 1644.586720] kmem_cache_alloc+0x277/0x370 [ 1644.590880] mb_cache_entry_create+0xb5/0x980 [ 1644.595391] ext4_xattr_get+0x57f/0x9c0 [ 1644.599379] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1644.604058] ? xattr_resolve_name+0x26e/0x3d0 [ 1644.608584] ? ext4_xattr_trusted_set+0x40/0x40 [ 1644.613252] vfs_getxattr+0x1ce/0x320 [ 1644.617040] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1644.621695] ? xattr_list_one+0x120/0x120 [ 1644.625844] ? ext4_xattr_trusted_set+0x40/0x40 [ 1644.630503] ovl_getxattr+0x28/0x170 [ 1644.634201] ovl_get_redirect_xattr+0x84/0x242 [ 1644.638768] ? ovl_getxattr+0x170/0x170 [ 1644.642732] ovl_lookup_single+0x40b/0x920 [ 1644.646962] ovl_lookup_layer+0x3bd/0x440 [ 1644.651119] ? check_preemption_disabled+0x41/0x280 [ 1644.656147] ? ovl_lookup_single+0x920/0x920 [ 1644.660565] ? d_alloc_parallel+0x744/0x19e0 [ 1644.664988] ovl_lookup+0x44b/0x1a00 [ 1644.668707] ? lock_downgrade+0x720/0x720 03:42:36 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(0x0, &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1644.672874] ? ovl_path_next+0x2d0/0x2d0 [ 1644.676961] ? __lockdep_init_map+0x100/0x5a0 [ 1644.681463] ? __lockdep_init_map+0x100/0x5a0 [ 1644.685979] __lookup_slow+0x246/0x4a0 [ 1644.689873] ? follow_dotdot_rcu+0x1040/0x1040 [ 1644.694463] ? lookup_fast+0x4e9/0x1080 [ 1644.698447] ? walk_component+0x798/0xda0 [ 1644.702592] walk_component+0x7ac/0xda0 [ 1644.706550] ? lookup_fast+0x1080/0x1080 [ 1644.710594] ? walk_component+0xda0/0xda0 [ 1644.714730] path_lookupat+0x1ff/0x8d0 [ 1644.718602] ? path_mountpoint+0xac0/0xac0 [ 1644.722845] ? ____cache_alloc_node+0xf4/0x1d0 [ 1644.727437] filename_lookup+0x1ac/0x5a0 [ 1644.731515] ? filename_parentat+0x590/0x590 [ 1644.735938] ? __phys_addr_symbol+0x2c/0x70 [ 1644.740262] ? __check_object_size+0x17b/0x3d1 [ 1644.744847] ? getname_flags+0x25b/0x590 [ 1644.749098] vfs_statx+0x113/0x210 [ 1644.752633] ? do_readlinkat+0x2f0/0x2f0 [ 1644.756678] ? vfs_write+0x3d7/0x540 [ 1644.760387] __se_sys_newlstat+0x96/0x120 [ 1644.764520] ? __se_sys_newstat+0x120/0x120 [ 1644.768844] ? vfs_write+0x393/0x540 [ 1644.772550] ? fput+0x2b/0x190 [ 1644.775726] ? ksys_write+0x1c8/0x2a0 [ 1644.779513] ? __ia32_sys_read+0xb0/0xb0 [ 1644.783557] ? posix_timer_fn+0x3d0/0x3d0 [ 1644.787693] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1644.792432] ? trace_hardirqs_off_caller+0x69/0x210 [ 1644.797441] ? do_syscall_64+0x21/0x620 [ 1644.801422] do_syscall_64+0xf9/0x620 [ 1644.805221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1644.810391] RIP: 0033:0x45d239 [ 1644.813567] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1644.832453] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1644.840155] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1644.847408] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1644.854666] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1644.861929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:42:37 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', 0x0) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1644.869184] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfc00}}) 03:42:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfe80}}) 03:42:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfec0}}) 03:42:37 executing program 0 (fault-call:8 fault-nth:7): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:37 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', 0x0) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff00}}) [ 1645.340768] FAULT_INJECTION: forcing a failure. [ 1645.340768] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.366466] CPU: 0 PID: 25321 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1645.374376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.383732] Call Trace: [ 1645.386339] dump_stack+0x1fc/0x2fe [ 1645.389982] should_fail.cold+0xa/0x14 [ 1645.393881] ? setup_fault_attr+0x200/0x200 [ 1645.398212] ? lock_acquire+0x170/0x3c0 [ 1645.402202] __should_failslab+0x115/0x180 [ 1645.406447] should_failslab+0x5/0xf [ 1645.410168] __kmalloc+0x2ab/0x3c0 [ 1645.413713] ? ovl_getxattr+0x9c/0x170 [ 1645.417613] ovl_getxattr+0x9c/0x170 [ 1645.421339] ovl_get_redirect_xattr+0x84/0x242 [ 1645.425928] ? ovl_getxattr+0x170/0x170 [ 1645.429915] ovl_lookup_single+0x40b/0x920 [ 1645.434164] ovl_lookup_layer+0x3bd/0x440 03:42:37 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(0x0, &(0x7f0000000340)) [ 1645.438313] ? check_preemption_disabled+0x41/0x280 [ 1645.443335] ? ovl_lookup_single+0x920/0x920 [ 1645.447755] ? d_alloc_parallel+0x744/0x19e0 [ 1645.452169] ovl_lookup+0x44b/0x1a00 [ 1645.455889] ? lock_downgrade+0x720/0x720 [ 1645.460055] ? ovl_path_next+0x2d0/0x2d0 [ 1645.464150] ? __lockdep_init_map+0x100/0x5a0 [ 1645.468650] ? __lockdep_init_map+0x100/0x5a0 [ 1645.473154] __lookup_slow+0x246/0x4a0 [ 1645.477038] ? follow_dotdot_rcu+0x1040/0x1040 [ 1645.481620] ? lookup_fast+0x4e9/0x1080 [ 1645.485589] ? walk_component+0x798/0xda0 [ 1645.489720] walk_component+0x7ac/0xda0 [ 1645.493680] ? lookup_fast+0x1080/0x1080 [ 1645.497721] ? walk_component+0xda0/0xda0 [ 1645.501872] path_lookupat+0x1ff/0x8d0 [ 1645.505767] ? path_mountpoint+0xac0/0xac0 [ 1645.510011] ? ____cache_alloc_node+0xf4/0x1d0 [ 1645.514587] filename_lookup+0x1ac/0x5a0 [ 1645.518639] ? filename_parentat+0x590/0x590 [ 1645.523048] ? __phys_addr_symbol+0x2c/0x70 [ 1645.527442] ? __check_object_size+0x17b/0x3d1 [ 1645.532015] ? getname_flags+0x25b/0x590 [ 1645.536114] vfs_statx+0x113/0x210 [ 1645.539649] ? do_readlinkat+0x2f0/0x2f0 [ 1645.543697] ? vfs_write+0x3d7/0x540 [ 1645.547398] __se_sys_newlstat+0x96/0x120 [ 1645.551529] ? __se_sys_newstat+0x120/0x120 [ 1645.555833] ? vfs_write+0x393/0x540 [ 1645.559545] ? fput+0x2b/0x190 [ 1645.562747] ? ksys_write+0x1c8/0x2a0 [ 1645.566541] ? __ia32_sys_read+0xb0/0xb0 [ 1645.570582] ? posix_timer_fn+0x3d0/0x3d0 [ 1645.574712] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1645.579461] ? trace_hardirqs_off_caller+0x69/0x210 [ 1645.584523] ? do_syscall_64+0x21/0x620 [ 1645.588482] do_syscall_64+0xf9/0x620 [ 1645.592268] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1645.597436] RIP: 0033:0x45d239 [ 1645.600620] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1645.620041] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1645.627743] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1645.634994] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 03:42:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x1000000}}) 03:42:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/156, 0x9c}], 0x1, &(0x7f0000003740)=[{0x0}, {0x0}], 0x2, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f4b8233b3f", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,worfile1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000040)='./file0/file0\x00', 0x2, 0x0, 0x0, 0x40000, &(0x7f0000001e00)={[{@usrjquota='usrjquota'}], [{@permit_directio='permit_directio'}, {@fsname={'fsname', 0x3d, 'ove\xcblay\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 03:42:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010100000000000000000000000005403810364bec3e0b2e9b3d4988b10004006f0115c2021640306a25a5b54ecad8f3d741579a73797a3100000000050001000600000005000500000000000c0007800829b2fdc90000000d000300686173683a6d616300000000c80d1750094bfe7c5f3c1f5d3718b48b3dbc74d08dcaeb9cd97eafe72348a251a80bbe651bca6600f66a2c876f58452d6c173e081f156d9cd128fc2597707c5e9f610ac6fe8ba8c4911d562ce491b8"], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040080) [ 1645.642256] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.649515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1645.656773] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:38 executing program 0 (fault-call:8 fault-nth:8): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1645.764957] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 03:42:38 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delpolicy={0x64, 0x14, 0x100, 0x70bd28, 0x25dfdbfc, {{@in=@local, @in6=@private2, 0x4e21, 0x7, 0x4e24, 0x25ee, 0xa, 0x80, 0xc0, 0x0, r4, r6}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8, 0x1f, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 03:42:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x20010000}}) [ 1645.856540] overlayfs: unrecognized mount option "worfile1" or missing value [ 1645.916144] FAULT_INJECTION: forcing a failure. [ 1645.916144] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.933284] overlayfs: unrecognized mount option "worfile1" or missing value [ 1645.959002] CPU: 1 PID: 25353 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1645.966917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.976272] Call Trace: [ 1645.978875] dump_stack+0x1fc/0x2fe [ 1645.982522] should_fail.cold+0xa/0x14 [ 1645.986412] ? setup_fault_attr+0x200/0x200 [ 1645.990738] __should_failslab+0x115/0x180 [ 1645.994971] should_failslab+0x5/0xf [ 1645.998668] kmem_cache_alloc+0x277/0x370 [ 1646.002854] mb_cache_entry_create+0xb5/0x980 [ 1646.007423] ext4_xattr_get+0x57f/0x9c0 [ 1646.011394] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1646.016060] ? xattr_resolve_name+0x26e/0x3d0 [ 1646.020538] ? ext4_xattr_trusted_set+0x40/0x40 [ 1646.025198] vfs_getxattr+0x1ce/0x320 [ 1646.028989] ? xattr_list_one+0x120/0x120 [ 1646.033125] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1646.038274] ? __kmalloc+0x38e/0x3c0 [ 1646.042000] ? ovl_getxattr+0x9c/0x170 [ 1646.045899] ovl_getxattr+0xbe/0x170 [ 1646.049624] ovl_get_redirect_xattr+0x84/0x242 [ 1646.054225] ? ovl_getxattr+0x170/0x170 [ 1646.058202] ovl_lookup_single+0x40b/0x920 [ 1646.062423] ovl_lookup_layer+0x3bd/0x440 [ 1646.066561] ? check_preemption_disabled+0x41/0x280 [ 1646.071563] ? ovl_lookup_single+0x920/0x920 [ 1646.075959] ? d_alloc_parallel+0x744/0x19e0 [ 1646.080354] ovl_lookup+0x44b/0x1a00 [ 1646.084055] ? lock_downgrade+0x720/0x720 [ 1646.088196] ? ovl_path_next+0x2d0/0x2d0 [ 1646.092252] ? __lockdep_init_map+0x100/0x5a0 [ 1646.096730] ? __lockdep_init_map+0x100/0x5a0 [ 1646.101210] __lookup_slow+0x246/0x4a0 [ 1646.105089] ? follow_dotdot_rcu+0x1040/0x1040 [ 1646.109685] ? lookup_fast+0x4e9/0x1080 [ 1646.113647] ? walk_component+0x798/0xda0 [ 1646.117794] walk_component+0x7ac/0xda0 [ 1646.121762] ? lookup_fast+0x1080/0x1080 [ 1646.125812] ? walk_component+0xda0/0xda0 [ 1646.130022] path_lookupat+0x1ff/0x8d0 [ 1646.133905] ? path_mountpoint+0xac0/0xac0 [ 1646.138128] ? ____cache_alloc_node+0xf4/0x1d0 [ 1646.142708] filename_lookup+0x1ac/0x5a0 [ 1646.146754] ? filename_parentat+0x590/0x590 [ 1646.151148] ? __phys_addr_symbol+0x2c/0x70 [ 1646.155452] ? __check_object_size+0x17b/0x3d1 [ 1646.160020] ? getname_flags+0x25b/0x590 [ 1646.164067] vfs_statx+0x113/0x210 [ 1646.167593] ? do_readlinkat+0x2f0/0x2f0 [ 1646.171636] ? vfs_write+0x3d7/0x540 [ 1646.175340] __se_sys_newlstat+0x96/0x120 [ 1646.179470] ? __se_sys_newstat+0x120/0x120 [ 1646.183776] ? vfs_write+0x393/0x540 [ 1646.187546] ? fput+0x2b/0x190 [ 1646.190730] ? ksys_write+0x1c8/0x2a0 [ 1646.194530] ? __ia32_sys_read+0xb0/0xb0 [ 1646.198604] ? posix_timer_fn+0x3d0/0x3d0 [ 1646.202742] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1646.207486] ? trace_hardirqs_off_caller+0x69/0x210 [ 1646.212531] ? do_syscall_64+0x21/0x620 [ 1646.216500] do_syscall_64+0xf9/0x620 [ 1646.220294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1646.225474] RIP: 0033:0x45d239 [ 1646.228656] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1646.247686] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 03:42:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x318) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:38 executing program 1: socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0x1}, 0x678, 0x0, 0x80000000, 0x3, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socketpair(0x15, 0x6, 0x0, &(0x7f0000000cc0)={0x0, 0x0}) close(0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="ac7a2cd16579ecc433ea27f0c3a31984c5e51f74473e7ebdc7aba7aaa7eade0c45"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private=0xa010100}, 0x0, 0x2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="7138524de39f58a687445f30f13a", 0xe}, {&(0x7f0000000380)}, {&(0x7f0000000680)="7630ce5d81fa184b8e38c438cf7c5630479d6d99faa39bc0b6e77e1b9a1e9c92694a002f2842358c6e3b1361ba5336a1b85c9b73fbbcb7fed8cc173698ecefbc3007b75088c2f6a1cff4ef4026c4f245e8d7b3345ce6c9d249dafe2fddc626486e4e95ec08e67d4c2d550a161c3a7e", 0x6f}, {&(0x7f0000000340)="897caf3828a458782d830725bf8e22f73ba8c938e6cf3d122122652b3cb2cb8fa6771aa746bd606f920b83e3cc2f6e49772f", 0x32}, {&(0x7f00000004c0)="fbd2f49d54e7a7bb4126c8fa8e61d0702d531bff471e92f69971df21f619d95d056d2115922d122d59de613b2efb61ce0a173397330997c4135dcf735be7df7e4b987c1e912f2207e870538f7f66ff381dce09d7052d48a88e807de4d784ffbc5356c5a2901b2f0b855fc144c5d7a0c77688da60f58432e2f9a18d00151eb18297c8a8556df3e8028300"/160, 0xa0}, {&(0x7f0000000800)="d1f7888e29df56677d70fe7a6876fa7b01f214746e130052371f2168905b0b5e8415b26f2d52dc066267b0464e9dc7fe4507dc6137cae6010997eee88a7688f8d0d40b4b84ef80", 0x47}, {&(0x7f00000005c0)="39dc0af0d46e990b1b08975a7a4e613caca51b216392d5336f3c27ff58f1fba6d3b7691c278604a7f821a10bc0a639f27726b754807627a512ff3e022ae85b5becba9ba40c43374e4a6978a5c83ce1fa39cb6ebeb94844289bba7ac2227a96018b44d0f0a5760311dd974bbcb3d85e719dfef429da50a60a80fa068880578377e8df2d366788", 0x86}], 0x7, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x390}, 0x240408c1) r1 = socket$kcm(0xa, 0x6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x8, 0x1ff, 0x40, 0xffffffffffffffff, 0x100, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000d00)='cgroup.events\x00', 0x0, 0x0) 03:42:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x3f000000}}) [ 1646.255382] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1646.262641] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1646.269906] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.277158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1646.284414] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/pid\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000180c200000000000000000086dd609c01e35cb55dcaceecd6c9da7d7d1de8f7bb4d00482f00fc020000000000000000000000000000ff0200000000000000000000000000013b08000000000000ff8924d7e4000000000001000000000000000000000000f61a2f9fa05999dfd434c2f58b052c0000000100000000000000000000000000000001fc010000000000000000000000000000eff5ffbf531898471902b7abc139db1b24ef3ca83ccdedd596e99bfad864f87bac30db10659f7491715d7eb6fc73fb00c23a802b133b"], 0x82) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r4, 0x0, r6, 0x0, 0x18102, 0x0) 03:42:38 executing program 0 (fault-call:8 fault-nth:9): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1646.448102] device bridge_slave_1 left promiscuous mode [ 1646.459094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.467752] device bridge_slave_0 left promiscuous mode [ 1646.474616] bridge0: port 1(bridge_slave_0) entered disabled state 03:42:38 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(0x0, &(0x7f0000000340)) [ 1646.638501] FAULT_INJECTION: forcing a failure. [ 1646.638501] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.693929] CPU: 0 PID: 25388 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1646.701846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.711203] Call Trace: [ 1646.713806] dump_stack+0x1fc/0x2fe [ 1646.717446] should_fail.cold+0xa/0x14 [ 1646.721342] ? setup_fault_attr+0x200/0x200 [ 1646.725670] ? lock_acquire+0x170/0x3c0 [ 1646.729659] __should_failslab+0x115/0x180 [ 1646.733902] should_failslab+0x5/0xf [ 1646.737616] kmem_cache_alloc_trace+0x284/0x380 [ 1646.742291] ? ovl_dentry_weird+0x37/0x50 [ 1646.746443] ovl_check_origin_fh+0x32b/0x4a0 [ 1646.750865] ovl_lookup+0x16b1/0x1a00 [ 1646.754668] ? lock_downgrade+0x720/0x720 [ 1646.758827] ? ovl_path_next+0x2d0/0x2d0 [ 1646.762913] ? __lockdep_init_map+0x100/0x5a0 [ 1646.767406] ? __lockdep_init_map+0x100/0x5a0 [ 1646.771905] __lookup_slow+0x246/0x4a0 [ 1646.775805] ? follow_dotdot_rcu+0x1040/0x1040 [ 1646.780398] ? lookup_fast+0x4e9/0x1080 [ 1646.784380] ? walk_component+0x798/0xda0 [ 1646.788538] walk_component+0x7ac/0xda0 [ 1646.792517] ? lookup_fast+0x1080/0x1080 [ 1646.796584] ? walk_component+0xda0/0xda0 [ 1646.800741] path_lookupat+0x1ff/0x8d0 [ 1646.804632] ? path_mountpoint+0xac0/0xac0 [ 1646.808900] ? _parse_integer+0x180/0x180 [ 1646.813059] ? __might_fault+0x192/0x1d0 [ 1646.817126] ? _copy_from_user+0xd2/0x130 [ 1646.821286] filename_lookup+0x1ac/0x5a0 [ 1646.825354] ? filename_parentat+0x590/0x590 [ 1646.829767] ? fs_reclaim_release+0xd0/0x110 [ 1646.834296] ? lock_acquire+0x170/0x3c0 [ 1646.838283] ? __phys_addr_symbol+0x2c/0x70 [ 1646.842618] ? __check_object_size+0x17b/0x3d1 [ 1646.847214] ? getname_flags+0x25b/0x590 [ 1646.851303] vfs_statx+0x113/0x210 [ 1646.854850] ? do_readlinkat+0x2f0/0x2f0 [ 1646.858916] ? vfs_write+0x3d7/0x540 [ 1646.862642] __se_sys_newlstat+0x96/0x120 [ 1646.866878] ? __se_sys_newstat+0x120/0x120 [ 1646.871219] ? vfs_write+0x393/0x540 [ 1646.874939] ? fput+0x2b/0x190 [ 1646.878134] ? ksys_write+0x1c8/0x2a0 [ 1646.881938] ? __ia32_sys_read+0xb0/0xb0 [ 1646.886000] ? posix_timer_fn+0x3d0/0x3d0 [ 1646.890152] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1646.894908] ? trace_hardirqs_off_caller+0x69/0x210 [ 1646.899930] ? do_syscall_64+0x21/0x620 [ 1646.903911] do_syscall_64+0xf9/0x620 [ 1646.907721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1646.912916] RIP: 0033:0x45d239 [ 1646.916114] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1646.935017] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 03:42:39 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(0x0, &(0x7f0000000340)) 03:42:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xf5ffffff}}) [ 1646.942731] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1646.950005] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1646.957389] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.964663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1646.971941] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socket$netlink(0x10, 0x3, 0x5) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000009c0)={0x10, 0xc8c5, 0x7}) recvmsg$can_raw(r2, &(0x7f0000000940)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/90, 0x5a}], 0x8, &(0x7f0000000840)=""/204, 0xcc}, 0x40010102) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3d90", 0x3}], 0x10, &(0x7f0000000000)={[{@nodots='nodots'}]}) 03:42:39 executing program 0 (fault-call:8 fault-nth:10): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1647.156752] FAULT_INJECTION: forcing a failure. [ 1647.156752] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.200655] CPU: 1 PID: 25407 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1647.208579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.217941] Call Trace: [ 1647.220544] dump_stack+0x1fc/0x2fe [ 1647.224186] should_fail.cold+0xa/0x14 [ 1647.228090] ? setup_fault_attr+0x200/0x200 [ 1647.232426] ? lock_acquire+0x170/0x3c0 [ 1647.236418] __should_failslab+0x115/0x180 [ 1647.240666] should_failslab+0x5/0xf [ 1647.244384] __kmalloc+0x2ab/0x3c0 03:42:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x333) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:39 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) [ 1647.247929] ? ovl_get_fh+0x64/0x2e0 [ 1647.251655] ovl_get_fh+0x64/0x2e0 [ 1647.255207] ovl_lookup+0x1662/0x1a00 [ 1647.259013] ? lock_downgrade+0x720/0x720 [ 1647.263182] ? ovl_path_next+0x2d0/0x2d0 [ 1647.267274] ? __lockdep_init_map+0x100/0x5a0 [ 1647.271775] ? __lockdep_init_map+0x100/0x5a0 [ 1647.276281] __lookup_slow+0x246/0x4a0 [ 1647.280175] ? follow_dotdot_rcu+0x1040/0x1040 [ 1647.284770] ? retint_kernel+0x2d/0x2d [ 1647.288659] ? walk_component+0x798/0xda0 [ 1647.292812] walk_component+0x7ac/0xda0 [ 1647.296806] ? lookup_fast+0x1080/0x1080 [ 1647.300884] ? walk_component+0xda0/0xda0 [ 1647.305046] path_lookupat+0x1ff/0x8d0 [ 1647.308945] ? path_mountpoint+0xac0/0xac0 [ 1647.313191] ? ____cache_alloc_node+0xf4/0x1d0 [ 1647.317790] filename_lookup+0x1ac/0x5a0 [ 1647.321859] ? filename_parentat+0x590/0x590 [ 1647.326284] ? __phys_addr_symbol+0x2c/0x70 [ 1647.330612] ? __check_object_size+0x17b/0x3d1 [ 1647.335212] ? getname_flags+0x25b/0x590 [ 1647.339277] vfs_statx+0x113/0x210 [ 1647.342817] ? do_readlinkat+0x2f0/0x2f0 [ 1647.346888] ? vfs_write+0x3d7/0x540 [ 1647.350620] __se_sys_newlstat+0x96/0x120 [ 1647.354781] ? __se_sys_newstat+0x120/0x120 [ 1647.359107] ? vfs_write+0x393/0x540 [ 1647.362830] ? fput+0x2b/0x190 [ 1647.366032] ? ksys_write+0x1c8/0x2a0 [ 1647.369820] ? __ia32_sys_read+0xb0/0xb0 [ 1647.373916] ? posix_timer_fn+0x3d0/0x3d0 [ 1647.378053] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1647.382892] ? trace_hardirqs_off_caller+0x69/0x210 [ 1647.387905] ? do_syscall_64+0x21/0x620 [ 1647.391871] do_syscall_64+0xf9/0x620 [ 1647.395661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1647.400833] RIP: 0033:0x45d239 [ 1647.404009] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1647.422891] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1647.430585] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1647.437846] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 03:42:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfc000000}}) [ 1647.445101] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.452354] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1647.459606] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:39 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="000000fbff000000280012800a00010076786c616e00000018000280140016"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x12) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r9, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x26}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x4000801) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0001847a3c140967e15a05002f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x48d0}, 0x14000810) creat(&(0x7f00000001c0)='./file0\x00', 0x3) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000240)=""/187, &(0x7f0000000300)=0xbb) 03:42:40 executing program 0 (fault-call:8 fault-nth:11): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) 03:42:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfdfdffff}}) 03:42:40 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) 03:42:40 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) 03:42:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfe800000}}) [ 1648.000068] FAULT_INJECTION: forcing a failure. [ 1648.000068] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.011791] CPU: 1 PID: 25437 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1648.019683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.029048] Call Trace: [ 1648.031649] dump_stack+0x1fc/0x2fe [ 1648.035292] should_fail.cold+0xa/0x14 [ 1648.039195] ? setup_fault_attr+0x200/0x200 [ 1648.043533] __should_failslab+0x115/0x180 [ 1648.047779] should_failslab+0x5/0xf [ 1648.051502] kmem_cache_alloc+0x277/0x370 [ 1648.055664] mb_cache_entry_create+0xb5/0x980 [ 1648.060167] ext4_xattr_get+0x57f/0x9c0 [ 1648.064158] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1648.068837] ? xattr_resolve_name+0x26e/0x3d0 [ 1648.073339] ? ext4_xattr_trusted_set+0x40/0x40 [ 1648.078016] vfs_getxattr+0x1ce/0x320 [ 1648.081822] ? xattr_list_one+0x120/0x120 [ 1648.085979] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1648.091005] ? __kmalloc+0x38e/0x3c0 [ 1648.094727] ? ovl_get_fh+0x64/0x2e0 [ 1648.098447] ovl_get_fh+0x86/0x2e0 [ 1648.101998] ovl_lookup+0x1662/0x1a00 [ 1648.105808] ? lock_downgrade+0x720/0x720 [ 1648.109976] ? ovl_path_next+0x2d0/0x2d0 [ 1648.114063] ? __lockdep_init_map+0x100/0x5a0 [ 1648.118565] ? __lockdep_init_map+0x100/0x5a0 [ 1648.123069] __lookup_slow+0x246/0x4a0 [ 1648.126969] ? follow_dotdot_rcu+0x1040/0x1040 [ 1648.131655] ? lookup_fast+0x4e9/0x1080 [ 1648.135643] ? walk_component+0x798/0xda0 [ 1648.139810] walk_component+0x7ac/0xda0 [ 1648.143798] ? lookup_fast+0x1080/0x1080 [ 1648.147866] ? walk_component+0xda0/0xda0 [ 1648.152025] path_lookupat+0x1ff/0x8d0 [ 1648.155927] ? path_mountpoint+0xac0/0xac0 [ 1648.160175] ? ____cache_alloc_node+0xf4/0x1d0 [ 1648.164776] filename_lookup+0x1ac/0x5a0 [ 1648.168844] ? filename_parentat+0x590/0x590 [ 1648.173271] ? __phys_addr_symbol+0x2c/0x70 [ 1648.177610] ? __check_object_size+0x17b/0x3d1 [ 1648.182211] ? getname_flags+0x25b/0x590 [ 1648.186286] vfs_statx+0x113/0x210 [ 1648.189836] ? do_readlinkat+0x2f0/0x2f0 [ 1648.193906] ? vfs_write+0x3d7/0x540 03:42:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfec00000}}) [ 1648.197630] __se_sys_newlstat+0x96/0x120 [ 1648.201781] ? __se_sys_newstat+0x120/0x120 [ 1648.206119] ? vfs_write+0x393/0x540 [ 1648.209841] ? fput+0x2b/0x190 [ 1648.213040] ? ksys_write+0x1c8/0x2a0 [ 1648.216852] ? __ia32_sys_read+0xb0/0xb0 [ 1648.220923] ? posix_timer_fn+0x3d0/0x3d0 [ 1648.225087] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1648.229849] ? trace_hardirqs_off_caller+0x69/0x210 [ 1648.234877] ? do_syscall_64+0x21/0x620 [ 1648.238869] do_syscall_64+0xf9/0x620 [ 1648.242685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1648.247880] RIP: 0033:0x45d239 03:42:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff000000}}) [ 1648.251082] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1648.269989] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1648.277702] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1648.284977] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1648.292261] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.299533] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 1648.306807] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x33a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', 0x0) 03:42:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfffffdfd}}) 03:42:40 executing program 5 (fault-call:9 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:40 executing program 0 (fault-call:8 fault-nth:12): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x5, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x6, 0x4, 0x1, 0x2, 0x3bc, 0x2, 0x6, 0x2, 0x2, 0xff, 0x31c, 0x800, 0x1, 0x8, 0x8, 0x11, {0x3, 0x7}, 0x6, 0x1}}) 03:42:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfffffff5}}) [ 1648.640502] FAULT_INJECTION: forcing a failure. [ 1648.640502] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.652607] CPU: 0 PID: 25480 Comm: syz-executor.5 Not tainted 4.19.139-syzkaller #0 [ 1648.660498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.669840] Call Trace: [ 1648.672420] dump_stack+0x1fc/0x2fe [ 1648.676037] should_fail.cold+0xa/0x14 [ 1648.679914] ? setup_fault_attr+0x200/0x200 [ 1648.684226] __should_failslab+0x115/0x180 [ 1648.688447] should_failslab+0x5/0xf [ 1648.692146] kmem_cache_alloc+0x277/0x370 [ 1648.696281] getname_flags+0xce/0x590 [ 1648.700068] user_path_at_empty+0x2a/0x50 [ 1648.704203] vfs_statx+0x113/0x210 [ 1648.707730] ? do_readlinkat+0x2f0/0x2f0 [ 1648.711776] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1648.716520] __se_sys_newlstat+0x96/0x120 [ 1648.720657] ? __se_sys_newstat+0x120/0x120 [ 1648.724964] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1648.729534] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1648.734275] ? rcu_nmi_exit+0xb3/0x180 [ 1648.738151] ? retint_kernel+0x2d/0x2d [ 1648.742029] ? do_syscall_64+0x4f/0x620 [ 1648.745988] ? do_syscall_64+0x56/0x620 [ 1648.750053] do_syscall_64+0xf9/0x620 [ 1648.753843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1648.759012] RIP: 0033:0x45d239 [ 1648.762195] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1648.781076] RSP: 002b:00007f9cc10ebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1648.788769] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1648.796022] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1648.803274] RBP: 00007f9cc10ebca0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.810528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.817781] R13: 00007fff9b6cf8ff R14: 00007f9cc10ec9c0 R15: 000000000118cf4c [ 1648.884328] FAULT_INJECTION: forcing a failure. [ 1648.884328] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.895889] CPU: 1 PID: 25496 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1648.903783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.913137] Call Trace: [ 1648.915741] dump_stack+0x1fc/0x2fe [ 1648.919388] should_fail.cold+0xa/0x14 [ 1648.923285] ? setup_fault_attr+0x200/0x200 [ 1648.927611] ? lock_acquire+0x170/0x3c0 [ 1648.931592] __should_failslab+0x115/0x180 [ 1648.935816] should_failslab+0x5/0xf [ 1648.939517] kmem_cache_alloc_trace+0x284/0x380 [ 1648.944171] ? ovl_dentry_weird+0x37/0x50 [ 1648.948306] ovl_check_origin_fh+0x32b/0x4a0 [ 1648.952706] ovl_lookup+0x16b1/0x1a00 [ 1648.956491] ? lock_downgrade+0x720/0x720 [ 1648.960630] ? ovl_path_next+0x2d0/0x2d0 [ 1648.964693] ? __lockdep_init_map+0x100/0x5a0 [ 1648.969174] ? __lockdep_init_map+0x100/0x5a0 [ 1648.973657] __lookup_slow+0x246/0x4a0 [ 1648.977532] ? follow_dotdot_rcu+0x1040/0x1040 [ 1648.982107] ? lookup_fast+0x4e9/0x1080 [ 1648.986069] ? walk_component+0x798/0xda0 [ 1648.990204] walk_component+0x7ac/0xda0 [ 1648.994167] ? lookup_fast+0x1080/0x1080 [ 1648.998212] ? walk_component+0xda0/0xda0 [ 1649.002359] path_lookupat+0x1ff/0x8d0 [ 1649.006242] ? path_mountpoint+0xac0/0xac0 [ 1649.010465] ? ____cache_alloc_node+0xf4/0x1d0 [ 1649.015044] filename_lookup+0x1ac/0x5a0 [ 1649.019096] ? filename_parentat+0x590/0x590 [ 1649.023503] ? __phys_addr_symbol+0x2c/0x70 [ 1649.027811] ? __check_object_size+0x17b/0x3d1 [ 1649.032386] ? getname_flags+0x25b/0x590 [ 1649.036441] vfs_statx+0x113/0x210 [ 1649.039971] ? do_readlinkat+0x2f0/0x2f0 [ 1649.044017] ? vfs_write+0x3d7/0x540 [ 1649.047724] __se_sys_newlstat+0x96/0x120 [ 1649.051858] ? __se_sys_newstat+0x120/0x120 [ 1649.056165] ? vfs_write+0x393/0x540 [ 1649.059864] ? fput+0x2b/0x190 [ 1649.063043] ? ksys_write+0x1c8/0x2a0 [ 1649.066833] ? __ia32_sys_read+0xb0/0xb0 [ 1649.070893] ? posix_timer_fn+0x3d0/0x3d0 [ 1649.075028] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1649.079770] ? trace_hardirqs_off_caller+0x69/0x210 [ 1649.084771] ? do_syscall_64+0x21/0x620 [ 1649.088744] do_syscall_64+0xf9/0x620 [ 1649.092533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1649.097707] RIP: 0033:0x45d239 [ 1649.100886] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1649.119769] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1649.127459] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 03:42:41 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, [], 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44880}, 0x4040001) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000023, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x6, [], &(0x7f00000002c0)=0x7f}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netrom(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x337}, 0x14}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000000)={0x0, 0x3, 0x8}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x5, 0x7f}]]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7e1b}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) 03:42:41 executing program 5 (fault-call:9 fault-nth:1): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1649.134710] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1649.141961] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.149211] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1649.156464] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x352) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:41 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x200000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xb7], 0x1}) 03:42:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009040800418e00000004fcff", 0x58}], 0x1) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) tee(r1, r2, 0x1, 0x1) 03:42:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getlink={0x20, 0x12, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x220, 0x10400}}, 0x20}}, 0x44000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r10, 0x40a85321, &(0x7f0000000180)={{0x59, 0x4}, 'port0\x00', 0x5a, 0x10800, 0x101, 0xfffffffb, 0xa64, 0x2, 0x3, 0x0, 0x4, 0x3f}) splice(r0, 0x0, r4, 0x0, 0x19404, 0x0) 03:42:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfc}}) [ 1649.377291] FAULT_INJECTION: forcing a failure. [ 1649.377291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1649.389127] CPU: 1 PID: 25511 Comm: syz-executor.5 Not tainted 4.19.139-syzkaller #0 [ 1649.397011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.406364] Call Trace: [ 1649.408965] dump_stack+0x1fc/0x2fe [ 1649.412611] should_fail.cold+0xa/0x14 [ 1649.416514] ? mark_held_locks+0xf0/0xf0 [ 1649.420582] ? setup_fault_attr+0x200/0x200 03:42:41 executing program 0 (fault-call:8 fault-nth:13): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1649.424915] ? mark_held_locks+0xf0/0xf0 [ 1649.428978] ? mark_held_locks+0xf0/0xf0 [ 1649.433050] ? mark_held_locks+0xf0/0xf0 [ 1649.437125] __alloc_pages_nodemask+0x239/0x2890 [ 1649.441888] ? __save_stack_trace+0x72/0x190 [ 1649.446298] ? deref_stack_reg+0x134/0x1d0 [ 1649.450534] ? __lock_acquire+0x6de/0x3ff0 [ 1649.454768] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1649.459617] ? mark_held_locks+0xf0/0xf0 [ 1649.463672] ? __might_fault+0x192/0x1d0 [ 1649.467739] ? _copy_from_user+0xd2/0x130 [ 1649.471872] ? get_pid_task+0xcd/0x190 [ 1649.475744] cache_grow_begin+0xa4/0x8a0 [ 1649.479790] ? setup_fault_attr+0x200/0x200 [ 1649.484095] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1649.488843] cache_alloc_refill+0x273/0x340 [ 1649.493153] kmem_cache_alloc+0x346/0x370 [ 1649.497305] getname_flags+0xce/0x590 [ 1649.501099] user_path_at_empty+0x2a/0x50 [ 1649.505238] vfs_statx+0x113/0x210 [ 1649.508773] ? do_readlinkat+0x2f0/0x2f0 [ 1649.512816] ? vfs_write+0x3d7/0x540 [ 1649.516516] __se_sys_newlstat+0x96/0x120 [ 1649.520647] ? __se_sys_newstat+0x120/0x120 [ 1649.524956] ? vfs_write+0x393/0x540 [ 1649.528651] ? fput+0x2b/0x190 [ 1649.531828] ? ksys_write+0x1c8/0x2a0 [ 1649.535613] ? __ia32_sys_read+0xb0/0xb0 [ 1649.539703] ? posix_timer_fn+0x3d0/0x3d0 [ 1649.543891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1649.548628] ? trace_hardirqs_off_caller+0x69/0x210 [ 1649.553639] ? do_syscall_64+0x21/0x620 [ 1649.557627] do_syscall_64+0xf9/0x620 [ 1649.561427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1649.566614] RIP: 0033:0x45d239 [ 1649.569790] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1649.588671] RSP: 002b:00007f9cc10ebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1649.596360] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1649.603613] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1649.610864] RBP: 00007f9cc10ebca0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.618115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.625372] R13: 00007fff9b6cf8ff R14: 00007f9cc10ec9c0 R15: 000000000118cf4c 03:42:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="240000001a0003041dfffd946f6105000200000a1f000003001108000800190040000000", 0x24}], 0x1}, 0x0) 03:42:41 executing program 5 (fault-call:9 fault-nth:2): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x120}}) 03:42:42 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006a72696467650000100002800a001400aaaaaaaaaaaa0000"], 0x40}}, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000240)={0x0, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7c, &(0x7f0000000000)={r5}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x3}, &(0x7f0000000100)=0x8) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x7, 0x875], 0x7fff}, 0x10) [ 1649.835908] FAULT_INJECTION: forcing a failure. [ 1649.835908] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.852848] CPU: 0 PID: 25539 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1649.860749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.868199] FAULT_INJECTION: forcing a failure. [ 1649.868199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1649.870104] Call Trace: [ 1649.884469] dump_stack+0x1fc/0x2fe [ 1649.888095] should_fail.cold+0xa/0x14 [ 1649.891973] ? setup_fault_attr+0x200/0x200 [ 1649.896287] ? lock_acquire+0x170/0x3c0 [ 1649.900256] __should_failslab+0x115/0x180 [ 1649.904479] should_failslab+0x5/0xf [ 1649.908176] __kmalloc+0x2ab/0x3c0 [ 1649.911703] ? ovl_encode_real_fh+0x161/0x490 [ 1649.916182] ? exportfs_encode_fh+0xb2/0x110 [ 1649.920581] ovl_encode_real_fh+0x161/0x490 [ 1649.924890] ? ovl_set_attr+0x220/0x220 [ 1649.928854] ? ovl_lookup_single+0x920/0x920 [ 1649.933251] ovl_verify_set_fh+0x31/0x170 [ 1649.937387] ovl_lookup+0x88b/0x1a00 [ 1649.941096] ? ovl_path_next+0x2d0/0x2d0 [ 1649.945161] ? __lockdep_init_map+0x100/0x5a0 [ 1649.949645] ? __lockdep_init_map+0x100/0x5a0 [ 1649.954130] __lookup_slow+0x246/0x4a0 [ 1649.958006] ? follow_dotdot_rcu+0x1040/0x1040 [ 1649.962580] ? lookup_fast+0x4e9/0x1080 [ 1649.966543] ? walk_component+0x798/0xda0 [ 1649.970683] walk_component+0x7ac/0xda0 [ 1649.974660] ? lookup_fast+0x1080/0x1080 [ 1649.978714] ? walk_component+0xda0/0xda0 [ 1649.982857] path_lookupat+0x1ff/0x8d0 [ 1649.986736] ? path_mountpoint+0xac0/0xac0 [ 1649.990958] ? _parse_integer+0x180/0x180 [ 1649.995093] ? __might_fault+0x192/0x1d0 [ 1649.999142] ? _copy_from_user+0xd2/0x130 [ 1650.003282] filename_lookup+0x1ac/0x5a0 [ 1650.007336] ? filename_parentat+0x590/0x590 [ 1650.011732] ? fs_reclaim_release+0xd0/0x110 [ 1650.016132] ? lock_acquire+0x170/0x3c0 [ 1650.020097] ? __phys_addr_symbol+0x2c/0x70 [ 1650.024406] ? __check_object_size+0x17b/0x3d1 [ 1650.028983] ? getname_flags+0x25b/0x590 [ 1650.033036] vfs_statx+0x113/0x210 [ 1650.036566] ? do_readlinkat+0x2f0/0x2f0 [ 1650.040630] ? vfs_write+0x3d7/0x540 [ 1650.044344] __se_sys_newlstat+0x96/0x120 [ 1650.048483] ? __se_sys_newstat+0x120/0x120 [ 1650.052797] ? vfs_write+0x393/0x540 [ 1650.056501] ? fput+0x2b/0x190 [ 1650.059681] ? ksys_write+0x1c8/0x2a0 [ 1650.063476] ? __ia32_sys_read+0xb0/0xb0 [ 1650.067526] ? posix_timer_fn+0x3d0/0x3d0 [ 1650.071661] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1650.076404] ? trace_hardirqs_off_caller+0x69/0x210 [ 1650.081408] ? do_syscall_64+0x21/0x620 [ 1650.085371] do_syscall_64+0xf9/0x620 [ 1650.089162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1650.094339] RIP: 0033:0x45d239 [ 1650.097515] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1650.116398] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1650.124089] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1650.131341] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1650.138595] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.145849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 1650.153099] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c [ 1650.160371] CPU: 1 PID: 25553 Comm: syz-executor.5 Not tainted 4.19.139-syzkaller #0 [ 1650.168265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.177623] Call Trace: [ 1650.180229] dump_stack+0x1fc/0x2fe [ 1650.183871] should_fail.cold+0xa/0x14 [ 1650.186830] overlayfs: failed to verify origin (bus/file1, ino=16031, err=-12) [ 1650.187761] ? check_preemption_disabled+0x41/0x280 [ 1650.187778] ? setup_fault_attr+0x200/0x200 [ 1650.204443] __alloc_pages_nodemask+0x239/0x2890 [ 1650.209210] ? __lock_acquire+0x6de/0x3ff0 [ 1650.213467] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1650.218318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1650.223177] ? _copy_from_user+0xd2/0x130 [ 1650.227343] ? ____cache_alloc_node+0x156/0x1d0 [ 1650.232031] cache_grow_begin+0xa4/0x8a0 [ 1650.236101] ? check_preemption_disabled+0x41/0x280 [ 1650.241131] ____cache_alloc_node+0x170/0x1d0 [ 1650.245641] ? check_preemption_disabled+0x41/0x280 [ 1650.250669] kmem_cache_alloc+0x1e4/0x370 [ 1650.254829] getname_flags+0xce/0x590 [ 1650.258668] user_path_at_empty+0x2a/0x50 [ 1650.262826] vfs_statx+0x113/0x210 [ 1650.266377] ? do_readlinkat+0x2f0/0x2f0 [ 1650.270434] ? vfs_write+0x3d7/0x540 [ 1650.274135] __se_sys_newlstat+0x96/0x120 [ 1650.278265] ? __se_sys_newstat+0x120/0x120 [ 1650.282569] ? vfs_write+0x393/0x540 [ 1650.286264] ? fput+0x2b/0x190 [ 1650.289439] ? ksys_write+0x1c8/0x2a0 [ 1650.293233] ? __ia32_sys_read+0xb0/0xb0 [ 1650.297293] ? posix_timer_fn+0x3d0/0x3d0 [ 1650.301436] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1650.306171] ? trace_hardirqs_off_caller+0x69/0x210 [ 1650.311168] ? do_syscall_64+0x21/0x620 [ 1650.315137] do_syscall_64+0xf9/0x620 [ 1650.318927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1650.324097] RIP: 0033:0x45d239 [ 1650.327276] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1650.346168] RSP: 002b:00007f9cc10ebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1650.353855] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1650.361104] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1650.368355] RBP: 00007f9cc10ebca0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.375606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:42:42 executing program 0 (fault-call:8 fault-nth:14): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2001}}) [ 1650.382855] R13: 00007fff9b6cf8ff R14: 00007f9cc10ec9c0 R15: 000000000118cf4c 03:42:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x364) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:42 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "a398291a84fd938e", "1d80848f74ac3a57bf34eb8aebde79af80d8f05d265e1a46dd52eb15f7325661", "a3ebf38a", "5dba074f583da3a6"}, 0x38) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 03:42:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3f00}}) 03:42:42 executing program 5 (fault-call:9 fault-nth:3): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1650.624414] FAULT_INJECTION: forcing a failure. [ 1650.624414] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.646591] CPU: 1 PID: 25569 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1650.654496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.663851] Call Trace: [ 1650.666453] dump_stack+0x1fc/0x2fe [ 1650.670099] should_fail.cold+0xa/0x14 [ 1650.673987] ? setup_fault_attr+0x200/0x200 [ 1650.678295] ? lock_acquire+0x170/0x3c0 [ 1650.682275] __should_failslab+0x115/0x180 [ 1650.686505] should_failslab+0x5/0xf [ 1650.690203] __kmalloc+0x2ab/0x3c0 [ 1650.693730] ? ovl_encode_real_fh+0x161/0x490 [ 1650.698208] ? exportfs_encode_fh+0xb2/0x110 [ 1650.702605] ovl_encode_real_fh+0x161/0x490 [ 1650.706923] ? ovl_set_attr+0x220/0x220 [ 1650.710894] ? ovl_lookup_single+0x920/0x920 [ 1650.715313] ovl_verify_set_fh+0x31/0x170 [ 1650.719445] ovl_lookup+0x88b/0x1a00 [ 1650.723148] ? ovl_path_next+0x2d0/0x2d0 [ 1650.727205] ? __lockdep_init_map+0x100/0x5a0 [ 1650.731684] ? __lockdep_init_map+0x100/0x5a0 [ 1650.736273] __lookup_slow+0x246/0x4a0 [ 1650.740143] ? follow_dotdot_rcu+0x1040/0x1040 [ 1650.744727] ? lookup_fast+0x4e9/0x1080 [ 1650.748703] ? walk_component+0x798/0xda0 [ 1650.752840] walk_component+0x7ac/0xda0 [ 1650.756800] ? lookup_fast+0x1080/0x1080 [ 1650.760852] ? walk_component+0xda0/0xda0 [ 1650.765003] path_lookupat+0x1ff/0x8d0 [ 1650.768896] ? path_mountpoint+0xac0/0xac0 [ 1650.773125] ? __might_fault+0x192/0x1d0 [ 1650.777184] ? _copy_from_user+0xd2/0x130 [ 1650.781342] filename_lookup+0x1ac/0x5a0 [ 1650.785394] ? filename_parentat+0x590/0x590 [ 1650.789790] ? __phys_addr_symbol+0x2c/0x70 [ 1650.794095] ? __check_object_size+0x17b/0x3d1 [ 1650.798664] ? getname_flags+0x25b/0x590 [ 1650.802715] vfs_statx+0x113/0x210 [ 1650.806248] ? do_readlinkat+0x2f0/0x2f0 [ 1650.810294] ? vfs_write+0x3d7/0x540 [ 1650.813995] __se_sys_newlstat+0x96/0x120 [ 1650.818124] ? __se_sys_newstat+0x120/0x120 [ 1650.822429] ? vfs_write+0x393/0x540 [ 1650.826134] ? fput+0x2b/0x190 [ 1650.829326] ? ksys_write+0x1c8/0x2a0 [ 1650.833134] ? __ia32_sys_read+0xb0/0xb0 [ 1650.837187] ? posix_timer_fn+0x3d0/0x3d0 [ 1650.841351] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1650.846104] ? trace_hardirqs_off_caller+0x69/0x210 [ 1650.851109] ? do_syscall_64+0x21/0x620 [ 1650.855085] do_syscall_64+0xf9/0x620 [ 1650.858882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1650.864053] RIP: 0033:0x45d239 [ 1650.867294] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1650.886175] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1650.893864] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1650.901117] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1650.908368] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.915624] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1650.922972] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x80fe}}) [ 1650.995894] overlayfs: failed to verify origin (bus/file1, ino=16052, err=-12) 03:42:43 executing program 0 (fault-call:8 fault-nth:15): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1651.084177] FAULT_INJECTION: forcing a failure. [ 1651.084177] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.098749] CPU: 1 PID: 25586 Comm: syz-executor.5 Not tainted 4.19.139-syzkaller #0 [ 1651.106815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.116164] Call Trace: [ 1651.118766] dump_stack+0x1fc/0x2fe [ 1651.122424] should_fail.cold+0xa/0x14 [ 1651.126323] ? setup_fault_attr+0x200/0x200 [ 1651.130660] __should_failslab+0x115/0x180 [ 1651.134888] should_failslab+0x5/0xf [ 1651.138585] kmem_cache_alloc+0x277/0x370 [ 1651.142720] mb_cache_entry_create+0xb5/0x980 [ 1651.147203] ext4_xattr_get+0x57f/0x9c0 [ 1651.151162] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1651.155830] ? xattr_resolve_name+0x26e/0x3d0 [ 1651.160327] ? ext4_xattr_trusted_set+0x40/0x40 [ 1651.164987] vfs_getxattr+0x1ce/0x320 [ 1651.168769] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1651.173430] ? xattr_list_one+0x120/0x120 [ 1651.177583] ? ext4_xattr_trusted_set+0x40/0x40 [ 1651.182258] ovl_getxattr+0x28/0x170 [ 1651.185976] ovl_get_redirect_xattr+0x84/0x242 [ 1651.190553] ? ovl_getxattr+0x170/0x170 [ 1651.194523] ovl_lookup_single+0x40b/0x920 [ 1651.198744] ovl_lookup_layer+0x3bd/0x440 [ 1651.202886] ? check_preemption_disabled+0x41/0x280 [ 1651.207895] ? ovl_lookup_single+0x920/0x920 [ 1651.212288] ? d_alloc_parallel+0x744/0x19e0 [ 1651.216680] ovl_lookup+0x44b/0x1a00 [ 1651.220377] ? lock_downgrade+0x720/0x720 [ 1651.224534] ? ovl_path_next+0x2d0/0x2d0 [ 1651.228595] ? __lockdep_init_map+0x100/0x5a0 [ 1651.233073] ? __lockdep_init_map+0x100/0x5a0 [ 1651.237555] __lookup_slow+0x246/0x4a0 [ 1651.241430] ? follow_dotdot_rcu+0x1040/0x1040 [ 1651.246016] ? lookup_fast+0x4e9/0x1080 [ 1651.249993] ? walk_component+0x798/0xda0 [ 1651.254137] walk_component+0x7ac/0xda0 [ 1651.258097] ? lookup_fast+0x1080/0x1080 [ 1651.262140] ? walk_component+0xda0/0xda0 [ 1651.266274] path_lookupat+0x1ff/0x8d0 [ 1651.270158] ? path_mountpoint+0xac0/0xac0 [ 1651.274391] ? _parse_integer+0x180/0x180 [ 1651.278526] ? __might_fault+0x192/0x1d0 [ 1651.282587] ? _copy_from_user+0xd2/0x130 [ 1651.286732] filename_lookup+0x1ac/0x5a0 [ 1651.290777] ? filename_parentat+0x590/0x590 [ 1651.295173] ? __phys_addr_symbol+0x2c/0x70 [ 1651.299486] ? __check_object_size+0x17b/0x3d1 [ 1651.304075] ? getname_flags+0x25b/0x590 [ 1651.308131] vfs_statx+0x113/0x210 [ 1651.311656] ? do_readlinkat+0x2f0/0x2f0 [ 1651.315699] ? vfs_write+0x3d7/0x540 [ 1651.319399] __se_sys_newlstat+0x96/0x120 [ 1651.323531] ? __se_sys_newstat+0x120/0x120 [ 1651.327836] ? vfs_write+0x393/0x540 [ 1651.331533] ? fput+0x2b/0x190 [ 1651.334716] ? ksys_write+0x1c8/0x2a0 [ 1651.338499] ? __ia32_sys_read+0xb0/0xb0 [ 1651.342541] ? posix_timer_fn+0x3d0/0x3d0 [ 1651.346675] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1651.351413] ? trace_hardirqs_off_caller+0x69/0x210 [ 1651.356412] ? do_syscall_64+0x21/0x620 [ 1651.360371] do_syscall_64+0xf9/0x620 [ 1651.364164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1651.369345] RIP: 0033:0x45d239 [ 1651.372530] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1651.391412] RSP: 002b:00007f9cc10ebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1651.399100] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1651.406355] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1651.413607] RBP: 00007f9cc10ebca0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.420859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1651.428111] R13: 00007fff9b6cf8ff R14: 00007f9cc10ec9c0 R15: 000000000118cf4c 03:42:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xc0fe}}) 03:42:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x38a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfc00}}) [ 1651.787719] FAULT_INJECTION: forcing a failure. [ 1651.787719] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.805623] CPU: 0 PID: 25597 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1651.813526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.822879] Call Trace: [ 1651.825477] dump_stack+0x1fc/0x2fe [ 1651.829120] should_fail.cold+0xa/0x14 [ 1651.833021] ? setup_fault_attr+0x200/0x200 [ 1651.837346] ? lock_acquire+0x170/0x3c0 [ 1651.841329] __should_failslab+0x115/0x180 [ 1651.845572] should_failslab+0x5/0xf [ 1651.849291] kmem_cache_alloc_trace+0x284/0x380 [ 1651.853961] ? ovl_lookup_single+0x232/0x920 [ 1651.858381] ovl_encode_real_fh+0xc6/0x490 [ 1651.862622] ? ovl_set_attr+0x220/0x220 [ 1651.866603] ? ovl_lookup_single+0x920/0x920 [ 1651.871019] ovl_verify_set_fh+0x31/0x170 [ 1651.875179] ovl_lookup+0x88b/0x1a00 [ 1651.878908] ? ovl_path_next+0x2d0/0x2d0 [ 1651.882993] ? __lockdep_init_map+0x100/0x5a0 [ 1651.887492] ? __lockdep_init_map+0x100/0x5a0 [ 1651.891992] __lookup_slow+0x246/0x4a0 [ 1651.895882] ? follow_dotdot_rcu+0x1040/0x1040 [ 1651.900474] ? lookup_fast+0x4e9/0x1080 [ 1651.904459] ? walk_component+0x798/0xda0 [ 1651.908618] walk_component+0x7ac/0xda0 [ 1651.912597] ? lookup_fast+0x1080/0x1080 [ 1651.916663] ? walk_component+0xda0/0xda0 [ 1651.920819] path_lookupat+0x1ff/0x8d0 [ 1651.924711] ? path_mountpoint+0xac0/0xac0 [ 1651.928960] ? ____cache_alloc_node+0xf4/0x1d0 [ 1651.933557] filename_lookup+0x1ac/0x5a0 [ 1651.937620] ? filename_parentat+0x590/0x590 [ 1651.942036] ? __phys_addr_symbol+0x2c/0x70 [ 1651.946360] ? __check_object_size+0x17b/0x3d1 [ 1651.950953] ? getname_flags+0x25b/0x590 [ 1651.955025] vfs_statx+0x113/0x210 [ 1651.958574] ? do_readlinkat+0x2f0/0x2f0 [ 1651.962639] ? vfs_write+0x3d7/0x540 [ 1651.966363] __se_sys_newlstat+0x96/0x120 [ 1651.970512] ? __se_sys_newstat+0x120/0x120 [ 1651.974838] ? vfs_write+0x393/0x540 [ 1651.978554] ? fput+0x2b/0x190 [ 1651.981748] ? ksys_write+0x1c8/0x2a0 [ 1651.985552] ? __ia32_sys_read+0xb0/0xb0 [ 1651.989754] ? posix_timer_fn+0x3d0/0x3d0 [ 1651.993910] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1651.998669] ? trace_hardirqs_off_caller+0x69/0x210 [ 1652.003696] ? do_syscall_64+0x21/0x620 [ 1652.007680] do_syscall_64+0xf9/0x620 [ 1652.011493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1652.016686] RIP: 0033:0x45d239 [ 1652.019879] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1652.038781] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1652.046503] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1652.053774] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1652.061044] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.068310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 1652.075575] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c [ 1652.092591] overlayfs: failed to verify origin (bus/file1, ino=15968, err=-12) 03:42:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfe80}}) 03:42:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:44 executing program 5 (fault-call:9 fault-nth:4): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:44 executing program 0 (fault-call:8 fault-nth:16): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfec0}}) 03:42:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x3aa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xff00}}) 03:42:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x1000000}}) 03:42:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) 03:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x20010000}}) 03:42:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) 03:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3f000000}}) 03:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xf5ffffff}}) [ 1653.173461] FAULT_INJECTION: forcing a failure. [ 1653.173461] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.186061] CPU: 0 PID: 25633 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1653.193951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.203300] Call Trace: [ 1653.205898] dump_stack+0x1fc/0x2fe [ 1653.209540] should_fail.cold+0xa/0x14 [ 1653.213433] ? setup_fault_attr+0x200/0x200 [ 1653.217765] ? lock_acquire+0x170/0x3c0 [ 1653.221754] __should_failslab+0x115/0x180 [ 1653.225993] should_failslab+0x5/0xf [ 1653.229716] kmem_cache_alloc_trace+0x284/0x380 [ 1653.234388] ? ovl_lookup_single+0x232/0x920 [ 1653.238804] ovl_encode_real_fh+0xc6/0x490 [ 1653.243056] ? ovl_set_attr+0x220/0x220 [ 1653.247046] ? ovl_lookup_single+0x920/0x920 [ 1653.251462] ovl_verify_set_fh+0x31/0x170 [ 1653.255618] ovl_lookup+0x88b/0x1a00 [ 1653.259354] ? ovl_path_next+0x2d0/0x2d0 [ 1653.263443] ? __lockdep_init_map+0x100/0x5a0 [ 1653.267947] ? __lockdep_init_map+0x100/0x5a0 [ 1653.272449] __lookup_slow+0x246/0x4a0 [ 1653.276364] ? follow_dotdot_rcu+0x1040/0x1040 [ 1653.280956] ? lookup_fast+0x4e9/0x1080 [ 1653.284939] ? walk_component+0x798/0xda0 [ 1653.289108] walk_component+0x7ac/0xda0 [ 1653.293085] ? lookup_fast+0x1080/0x1080 [ 1653.297152] ? walk_component+0xda0/0xda0 [ 1653.301308] path_lookupat+0x1ff/0x8d0 [ 1653.305200] ? path_mountpoint+0xac0/0xac0 [ 1653.309448] ? ____cache_alloc_node+0xf4/0x1d0 [ 1653.314052] filename_lookup+0x1ac/0x5a0 [ 1653.318117] ? filename_parentat+0x590/0x590 [ 1653.322536] ? __phys_addr_symbol+0x2c/0x70 [ 1653.326861] ? __check_object_size+0x17b/0x3d1 [ 1653.331453] ? getname_flags+0x25b/0x590 [ 1653.335528] vfs_statx+0x113/0x210 [ 1653.339080] ? do_readlinkat+0x2f0/0x2f0 [ 1653.343147] ? vfs_write+0x3d7/0x540 [ 1653.346878] __se_sys_newlstat+0x96/0x120 [ 1653.351036] ? __se_sys_newstat+0x120/0x120 [ 1653.355450] ? vfs_write+0x393/0x540 [ 1653.359169] ? fput+0x2b/0x190 [ 1653.362362] ? ksys_write+0x1c8/0x2a0 [ 1653.366172] ? __ia32_sys_read+0xb0/0xb0 [ 1653.370236] ? posix_timer_fn+0x3d0/0x3d0 [ 1653.374388] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1653.379146] ? trace_hardirqs_off_caller+0x69/0x210 [ 1653.384178] ? do_syscall_64+0x21/0x620 [ 1653.388156] do_syscall_64+0xf9/0x620 [ 1653.391965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1653.397155] RIP: 0033:0x45d239 [ 1653.400350] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1653.419263] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1653.426973] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1653.434244] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1653.441511] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.448775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 1653.456040] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c [ 1653.466885] overlayfs: failed to verify origin (bus/file1, ino=16013, err=-12) [ 1653.625334] FAULT_INJECTION: forcing a failure. [ 1653.625334] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.648536] CPU: 1 PID: 25635 Comm: syz-executor.5 Not tainted 4.19.139-syzkaller #0 [ 1653.656434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.665791] Call Trace: [ 1653.668387] dump_stack+0x1fc/0x2fe [ 1653.672025] should_fail.cold+0xa/0x14 [ 1653.675921] ? setup_fault_attr+0x200/0x200 [ 1653.680259] __should_failslab+0x115/0x180 [ 1653.684502] should_failslab+0x5/0xf [ 1653.688217] kmem_cache_alloc+0x277/0x370 [ 1653.692374] mb_cache_entry_create+0xb5/0x980 [ 1653.696878] ext4_xattr_get+0x57f/0x9c0 [ 1653.700858] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1653.705531] ? xattr_resolve_name+0x26e/0x3d0 [ 1653.710027] ? ext4_xattr_trusted_set+0x40/0x40 [ 1653.714701] vfs_getxattr+0x1ce/0x320 [ 1653.718503] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1653.723175] ? xattr_list_one+0x120/0x120 [ 1653.727329] ? ext4_xattr_trusted_set+0x40/0x40 [ 1653.732012] ovl_getxattr+0x28/0x170 [ 1653.735732] ovl_get_redirect_xattr+0x84/0x242 [ 1653.740316] ? ovl_getxattr+0x170/0x170 [ 1653.744295] ovl_lookup_single+0x40b/0x920 [ 1653.748537] ovl_lookup_layer+0x3bd/0x440 [ 1653.752689] ? check_preemption_disabled+0x41/0x280 [ 1653.757700] ? ovl_lookup_single+0x920/0x920 [ 1653.762107] ? d_alloc_parallel+0x744/0x19e0 [ 1653.766523] ovl_lookup+0x44b/0x1a00 [ 1653.770244] ? lock_downgrade+0x720/0x720 [ 1653.774408] ? ovl_path_next+0x2d0/0x2d0 [ 1653.778500] ? __lockdep_init_map+0x100/0x5a0 [ 1653.782998] ? __lockdep_init_map+0x100/0x5a0 [ 1653.787495] __lookup_slow+0x246/0x4a0 [ 1653.791383] ? follow_dotdot_rcu+0x1040/0x1040 [ 1653.795963] ? lookup_fast+0x4e9/0x1080 [ 1653.799938] ? walk_component+0x798/0xda0 [ 1653.804078] walk_component+0x7ac/0xda0 [ 1653.808036] ? lookup_fast+0x1080/0x1080 [ 1653.812084] ? walk_component+0xda0/0xda0 [ 1653.816227] path_lookupat+0x1ff/0x8d0 [ 1653.820108] ? path_mountpoint+0xac0/0xac0 [ 1653.824334] ? __might_fault+0x192/0x1d0 [ 1653.828397] ? _copy_from_user+0xd2/0x130 [ 1653.832552] filename_lookup+0x1ac/0x5a0 [ 1653.836607] ? filename_parentat+0x590/0x590 [ 1653.841012] ? __phys_addr_symbol+0x2c/0x70 [ 1653.845324] ? __check_object_size+0x17b/0x3d1 [ 1653.849908] ? getname_flags+0x25b/0x590 [ 1653.853956] vfs_statx+0x113/0x210 [ 1653.857489] ? do_readlinkat+0x2f0/0x2f0 [ 1653.861536] ? vfs_write+0x3d7/0x540 [ 1653.865254] __se_sys_newlstat+0x96/0x120 [ 1653.869411] ? __se_sys_newstat+0x120/0x120 [ 1653.873738] ? vfs_write+0x393/0x540 [ 1653.877448] ? fput+0x2b/0x190 [ 1653.880644] ? ksys_write+0x1c8/0x2a0 [ 1653.884446] ? __ia32_sys_read+0xb0/0xb0 [ 1653.888511] ? posix_timer_fn+0x3d0/0x3d0 [ 1653.892651] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1653.897405] ? trace_hardirqs_off_caller+0x69/0x210 [ 1653.902427] ? do_syscall_64+0x21/0x620 [ 1653.906414] do_syscall_64+0xf9/0x620 [ 1653.910224] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1653.915407] RIP: 0033:0x45d239 [ 1653.918584] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1653.937470] RSP: 002b:00007f9cc10ebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1653.945175] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1653.952430] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1653.959686] RBP: 00007f9cc10ebca0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.966938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1653.974194] R13: 00007fff9b6cf8ff R14: 00007f9cc10ec9c0 R15: 000000000118cf4c 03:42:46 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfc000000}}) 03:42:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x3f0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:46 executing program 0 (fault-call:8 fault-nth:17): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) 03:42:46 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000d00010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696469723d2e2f6669c90e8014275a79ffdb0a2d6c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x44) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x306}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040), 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000014) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0xa000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x78, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x93}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x62510786}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff8001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x41}, 0x8881) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 1654.138783] overlayfs: missing 'lowerdir' [ 1654.184383] overlayfs: missing 'lowerdir' 03:42:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$CHAR_RAW_BSZGET(r1, 0x80081270, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='erspan0\x00', 0x10) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x581440) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000040)={0x3ff, "76cdce7f6c0a18a44b9fea668aa4aa0cccd0fcc6debb9b819a8bbe10c171d525", 0xb4b6dc2fbae088eb, 0x1f, 0x5, 0x10, 0x40010, 0x2}) connect$inet(r5, &(0x7f0000000100), 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000075, 0x0) 03:42:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfdfdffff}}) [ 1654.292066] FAULT_INJECTION: forcing a failure. [ 1654.292066] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.304155] CPU: 0 PID: 25700 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1654.312052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.321403] Call Trace: [ 1654.324002] dump_stack+0x1fc/0x2fe [ 1654.327648] should_fail.cold+0xa/0x14 [ 1654.331549] ? setup_fault_attr+0x200/0x200 [ 1654.335884] __should_failslab+0x115/0x180 [ 1654.340130] should_failslab+0x5/0xf [ 1654.343849] kmem_cache_alloc+0x277/0x370 [ 1654.348004] mb_cache_entry_create+0xb5/0x980 [ 1654.352509] ext4_xattr_get+0x57f/0x9c0 [ 1654.356493] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1654.361170] ? xattr_resolve_name+0x26e/0x3d0 [ 1654.365671] ? ext4_xattr_trusted_set+0x40/0x40 [ 1654.370346] vfs_getxattr+0x1ce/0x320 [ 1654.374156] ? xattr_list_one+0x120/0x120 [ 1654.378312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1654.383331] ? __kmalloc+0x38e/0x3c0 [ 1654.387045] ? ovl_get_fh+0x64/0x2e0 [ 1654.390768] ovl_get_fh+0x86/0x2e0 [ 1654.394316] ovl_verify_fh+0x1f/0x130 [ 1654.398122] ovl_verify_set_fh+0x63/0x170 [ 1654.402276] ovl_lookup+0x88b/0x1a00 [ 1654.406005] ? ovl_path_next+0x2d0/0x2d0 [ 1654.410093] ? __lockdep_init_map+0x100/0x5a0 [ 1654.414592] ? __lockdep_init_map+0x100/0x5a0 [ 1654.419093] __lookup_slow+0x246/0x4a0 [ 1654.422989] ? follow_dotdot_rcu+0x1040/0x1040 [ 1654.427581] ? lookup_fast+0x4e9/0x1080 [ 1654.431565] ? walk_component+0x798/0xda0 [ 1654.435722] walk_component+0x7ac/0xda0 [ 1654.439701] ? lookup_fast+0x1080/0x1080 [ 1654.443767] ? walk_component+0xda0/0xda0 [ 1654.447937] path_lookupat+0x1ff/0x8d0 [ 1654.451834] ? path_mountpoint+0xac0/0xac0 [ 1654.456075] ? __might_fault+0x192/0x1d0 [ 1654.460141] ? _copy_from_user+0xd2/0x130 [ 1654.464310] filename_lookup+0x1ac/0x5a0 [ 1654.468375] ? filename_parentat+0x590/0x590 [ 1654.472797] ? __phys_addr_symbol+0x2c/0x70 [ 1654.477121] ? __check_object_size+0x17b/0x3d1 [ 1654.481719] ? getname_flags+0x25b/0x590 [ 1654.485794] vfs_statx+0x113/0x210 [ 1654.489353] ? do_readlinkat+0x2f0/0x2f0 [ 1654.493417] ? vfs_write+0x3d7/0x540 [ 1654.497145] __se_sys_newlstat+0x96/0x120 [ 1654.501299] ? __se_sys_newstat+0x120/0x120 [ 1654.505628] ? vfs_write+0x393/0x540 [ 1654.509342] ? fput+0x2b/0x190 [ 1654.512534] ? ksys_write+0x1c8/0x2a0 [ 1654.516339] ? __ia32_sys_read+0xb0/0xb0 [ 1654.520405] ? posix_timer_fn+0x3d0/0x3d0 [ 1654.524558] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1654.529319] ? trace_hardirqs_off_caller+0x69/0x210 [ 1654.534341] ? do_syscall_64+0x21/0x620 [ 1654.538321] do_syscall_64+0xf9/0x620 [ 1654.542131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1654.547323] RIP: 0033:0x45d239 [ 1654.550521] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1654.556044] overlayfs: missing 'lowerdir' [ 1654.569417] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1654.569431] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1654.569439] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1654.569446] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.569454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 1654.569462] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:47 executing program 0 (fault-call:8 fault-nth:18): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = getpid() get_robust_list(r1, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000001180)=0x18) r2 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = syz_open_procfs(r2, &(0x7f0000000300)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) r4 = getpid() get_robust_list(r4, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000001180)=0x18) r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/dev\x00') preadv(r5, &(0x7f00000017c0), 0x218, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x1) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_LABEL={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x0) 03:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfe800000}}) 03:42:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000140)) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x20000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e867843349f5ac2e92cd64d2a0efbec35ab2a5386969ec86d75fb9110d4275038c97314f13965d20137a8253da5232d0938fbb162409197aab8aa9ebdaa36a03cc64eaf3b64ef6b713bb033d490e46076bcd9c013e9126eaf2fca9e39c1102bee7451297af906a2f79d6be97a8199bf849743"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) setsockopt$inet_udp_int(r0, 0x11, 0xc4, &(0x7f0000000040), 0x4) 03:42:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x3fc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfec00000}}) [ 1654.960275] overlayfs: unrecognized mount option "metacopy=on†xC4ŸZÂé" or missing value [ 1655.057008] FAULT_INJECTION: forcing a failure. [ 1655.057008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1655.062268] overlayfs: unrecognized mount option "metacopy=on†xC4ŸZÂé" or missing value [ 1655.068850] CPU: 1 PID: 25734 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1655.068866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.068875] Call Trace: [ 1655.068912] dump_stack+0x1fc/0x2fe [ 1655.068940] should_fail.cold+0xa/0x14 [ 1655.068960] ? setup_fault_attr+0x200/0x200 [ 1655.068981] ? __lock_acquire+0x6de/0x3ff0 [ 1655.069005] __alloc_pages_nodemask+0x239/0x2890 [ 1655.069019] ? mark_held_locks+0xf0/0xf0 [ 1655.069039] ? unwind_next_frame+0x10a9/0x1c60 [ 1655.069055] ? mark_held_locks+0xf0/0xf0 [ 1655.069068] ? deref_stack_reg+0x134/0x1d0 [ 1655.069089] ? is_bpf_text_address+0xd5/0x1b0 [ 1655.069107] ? check_preemption_disabled+0x41/0x280 [ 1655.069124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1655.069144] ? mark_page_accessed+0x581/0xda0 [ 1655.069169] ? __getblk_gfp+0x48/0x70 03:42:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0xa8001, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7570706572070c25186489a6aa0300723d2e2f66696565312c6c6f7765728169723d2e2f6275732cc79a5d88d47b8d9d2e2f66696c65300c6d657461636f79ab02c78a360270719b7f1196e3dcfc7ff10bf5b458bfd4a809b428fb647ce0735d81010000000000000059f25e0e95bb8a54831b51c5fe0aa4298d78f970e70b84a56fa4af0d901f4beb5a0c2692202eb2"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) rmdir(&(0x7f0000000040)='./file0\x00') mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000180)) [ 1655.139420] overlayfs: unrecognized mount option "upper %d‰¦ª" or missing value [ 1655.144312] ? check_preemption_disabled+0x41/0x280 [ 1655.144336] cache_grow_begin+0xa4/0x8a0 [ 1655.144354] ? setup_fault_attr+0x200/0x200 [ 1655.144369] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1655.144387] cache_alloc_refill+0x273/0x340 [ 1655.144406] kmem_cache_alloc+0x346/0x370 [ 1655.144423] mb_cache_entry_create+0xb5/0x980 [ 1655.157869] overlayfs: unrecognized mount option "upper %d‰¦ª" or missing value [ 1655.165217] ext4_xattr_get+0x57f/0x9c0 [ 1655.165237] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1655.165254] ? xattr_resolve_name+0x26e/0x3d0 [ 1655.165270] ? ext4_xattr_trusted_set+0x40/0x40 [ 1655.165286] vfs_getxattr+0x1ce/0x320 [ 1655.165304] ? xattr_list_one+0x120/0x120 [ 1655.165321] ? ovl_encode_real_fh+0x374/0x490 [ 1655.165340] ovl_get_fh+0x22/0x2e0 [ 1655.165357] ovl_verify_fh+0x1f/0x130 [ 1655.165375] ovl_verify_set_fh+0x63/0x170 [ 1655.225790] overlayfs: failed to resolve './file0': -2 [ 1655.229775] ovl_lookup+0x88b/0x1a00 03:42:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x400, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302ce4ec396d657461636f7079e394eef74484a553f214fb2e90ef793fff895f66cf64ea0ab6293dbea18bcfc4684dd0db28e1c87f69844617c5878e052e3581fc7076050b56d49c4869e37eff2e6f5e16b076dba7008e06764fdac07ac1dc349e63c2b309e32d59cfbd090da806d293"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1655.229803] ? ovl_path_next+0x2d0/0x2d0 [ 1655.229845] ? __lockdep_init_map+0x100/0x5a0 [ 1655.250467] overlayfs: failed to resolve './file0': -2 [ 1655.251051] ? __lockdep_init_map+0x100/0x5a0 [ 1655.251071] __lookup_slow+0x246/0x4a0 [ 1655.276925] ? follow_dotdot_rcu+0x1040/0x1040 [ 1655.281527] ? lookup_fast+0x4e9/0x1080 [ 1655.285519] ? walk_component+0x798/0xda0 [ 1655.289684] walk_component+0x7ac/0xda0 [ 1655.293669] ? lookup_fast+0x1080/0x1080 [ 1655.297740] ? walk_component+0xda0/0xda0 [ 1655.301091] overlayfs: unrecognized mount option "äì9metacopyã”î÷D„¥Sòû.ïy?ÿ‰_fÏdê [ 1655.301091] ¶)=¾¡‹ÏÄhMÐÛ(áÈi„FŇŽ.5üpv VÔœHiã~ÿ.o^°vÛ§" or missing value [ 1655.301895] path_lookupat+0x1ff/0x8d0 [ 1655.301916] ? path_mountpoint+0xac0/0xac0 [ 1655.325095] ? ____cache_alloc_node+0xf4/0x1d0 [ 1655.329692] filename_lookup+0x1ac/0x5a0 [ 1655.333758] ? filename_parentat+0x590/0x590 [ 1655.333883] overlayfs: unrecognized mount option "äì9metacopyã”î÷D„¥Sòû.ïy?ÿ‰_fÏdê [ 1655.333883] ¶)=¾¡‹ÏÄhMÐÛ(áÈi„FŇŽ.5üpv VÔœHiã~ÿ.o^°vÛ§" or missing value [ 1655.338195] ? __phys_addr_symbol+0x2c/0x70 [ 1655.338210] ? __check_object_size+0x17b/0x3d1 [ 1655.338233] ? getname_flags+0x25b/0x590 [ 1655.338255] vfs_statx+0x113/0x210 [ 1655.338273] ? do_readlinkat+0x2f0/0x2f0 [ 1655.338287] ? vfs_write+0x3d7/0x540 [ 1655.338312] __se_sys_newlstat+0x96/0x120 [ 1655.381714] ? __se_sys_newstat+0x120/0x120 [ 1655.386043] ? vfs_write+0x393/0x540 [ 1655.389763] ? fput+0x2b/0x190 [ 1655.392958] ? ksys_write+0x1c8/0x2a0 [ 1655.396766] ? __ia32_sys_read+0xb0/0xb0 [ 1655.400836] ? posix_timer_fn+0x3d0/0x3d0 03:42:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() r1 = socket(0x100000000011, 0x2, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200028bd7000fbdbdf2508000000300007800c00030001000000000000000800020009000f000c00040040000000000000000c00040001000000000000002c00038008000300020000000700010040000002080003000300000008000200060000000800010000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1655.404990] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1655.409748] ? trace_hardirqs_off_caller+0x69/0x210 [ 1655.414774] ? do_syscall_64+0x21/0x620 [ 1655.418762] do_syscall_64+0xf9/0x620 [ 1655.422578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1655.427772] RIP: 0033:0x45d239 [ 1655.430971] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1655.449872] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 03:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xff000000}}) [ 1655.457583] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1655.464857] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1655.472119] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.479373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 1655.486623] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:47 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) 03:42:47 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RWALK(r2, &(0x7f0000000140)={0x57, 0x6f, 0x1, {0x6, [{0x80, 0x3, 0x3}, {0x4, 0x3, 0x6}, {0x2, 0x3, 0x6}, {0x0, 0x0, 0x2}, {0x4, 0x1, 0x3}, {0x0, 0x4, 0x4}]}}, 0x57) 03:42:47 executing program 0 (fault-call:8 fault-nth:19): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1655.567663] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfffffdfd}}) 03:42:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x500) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xfffffff5}}) 03:42:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r7, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x26}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x4000801) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, r7, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x20008045) [ 1656.316912] FAULT_INJECTION: forcing a failure. [ 1656.316912] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.332186] CPU: 0 PID: 25784 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1656.340091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.349444] Call Trace: [ 1656.352043] dump_stack+0x1fc/0x2fe [ 1656.355684] should_fail.cold+0xa/0x14 [ 1656.359578] ? setup_fault_attr+0x200/0x200 [ 1656.363913] __should_failslab+0x115/0x180 [ 1656.368148] should_failslab+0x5/0xf [ 1656.371858] kmem_cache_alloc+0x277/0x370 [ 1656.376011] mb_cache_entry_create+0xb5/0x980 [ 1656.380510] ext4_xattr_get+0x57f/0x9c0 [ 1656.384490] ? ext4_xattr_ibody_get+0x5a0/0x5a0 [ 1656.389256] ? xattr_resolve_name+0x26e/0x3d0 [ 1656.393753] ? ext4_xattr_trusted_set+0x40/0x40 [ 1656.398433] vfs_getxattr+0x1ce/0x320 [ 1656.402248] ? xattr_list_one+0x120/0x120 [ 1656.406410] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1656.411427] ? __kmalloc+0x38e/0x3c0 [ 1656.415137] ? ovl_get_fh+0x64/0x2e0 [ 1656.418852] ovl_get_fh+0x86/0x2e0 [ 1656.422401] ovl_verify_fh+0x1f/0x130 [ 1656.426207] ovl_verify_set_fh+0x63/0x170 [ 1656.430367] ovl_lookup+0x88b/0x1a00 [ 1656.434093] ? ovl_path_next+0x2d0/0x2d0 [ 1656.438180] ? __lockdep_init_map+0x100/0x5a0 [ 1656.442677] ? __lockdep_init_map+0x100/0x5a0 [ 1656.447177] __lookup_slow+0x246/0x4a0 [ 1656.451068] ? follow_dotdot_rcu+0x1040/0x1040 [ 1656.455658] ? lookup_fast+0x4e9/0x1080 [ 1656.459640] ? walk_component+0x798/0xda0 [ 1656.463798] walk_component+0x7ac/0xda0 [ 1656.467782] ? lookup_fast+0x1080/0x1080 [ 1656.471853] ? walk_component+0xda0/0xda0 [ 1656.476020] path_lookupat+0x1ff/0x8d0 [ 1656.479916] ? path_mountpoint+0xac0/0xac0 [ 1656.484163] ? ____cache_alloc_node+0xf4/0x1d0 [ 1656.488756] filename_lookup+0x1ac/0x5a0 [ 1656.492827] ? filename_parentat+0x590/0x590 [ 1656.497252] ? __phys_addr_symbol+0x2c/0x70 [ 1656.501578] ? __check_object_size+0x17b/0x3d1 [ 1656.506175] ? getname_flags+0x25b/0x590 [ 1656.510254] vfs_statx+0x113/0x210 [ 1656.513802] ? do_readlinkat+0x2f0/0x2f0 [ 1656.517865] ? vfs_write+0x3d7/0x540 [ 1656.521591] __se_sys_newlstat+0x96/0x120 [ 1656.525741] ? __se_sys_newstat+0x120/0x120 [ 1656.530066] ? vfs_write+0x393/0x540 [ 1656.533782] ? fput+0x2b/0x190 [ 1656.536977] ? ksys_write+0x1c8/0x2a0 [ 1656.540782] ? __ia32_sys_read+0xb0/0xb0 [ 1656.544840] ? posix_timer_fn+0x3d0/0x3d0 [ 1656.548991] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1656.553746] ? trace_hardirqs_off_caller+0x69/0x210 [ 1656.558762] ? do_syscall_64+0x21/0x620 [ 1656.562742] do_syscall_64+0xf9/0x620 [ 1656.566548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1656.571733] RIP: 0033:0x45d239 [ 1656.574925] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1656.593822] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1656.601528] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1656.608794] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1656.616056] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.623321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 1656.630593] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:49 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:49 executing program 0 (fault-call:8 fault-nth:20): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) dup2(r4, r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) [ 1657.055096] FAULT_INJECTION: forcing a failure. [ 1657.055096] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.066821] CPU: 0 PID: 25836 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1657.074712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1657.084065] Call Trace: [ 1657.086666] dump_stack+0x1fc/0x2fe [ 1657.090310] should_fail.cold+0xa/0x14 [ 1657.094205] ? setup_fault_attr+0x200/0x200 [ 1657.098527] ? lock_acquire+0x170/0x3c0 [ 1657.102506] __should_failslab+0x115/0x180 [ 1657.106743] should_failslab+0x5/0xf [ 1657.110462] kmem_cache_alloc_trace+0x284/0x380 [ 1657.115136] ovl_encode_real_fh+0xc6/0x490 [ 1657.119373] ? ovl_set_attr+0x220/0x220 [ 1657.123347] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1657.128448] ? debug_check_no_obj_freed+0x201/0x482 [ 1657.133470] ovl_lookup_index+0x99/0x5a0 [ 1657.137530] ? kfree+0x110/0x210 [ 1657.140895] ? ovl_get_index_fh+0x210/0x210 [ 1657.145215] ? ovl_verify_set_fh+0x98/0x170 [ 1657.149537] ovl_lookup+0xc8b/0x1a00 [ 1657.153263] ? ovl_path_next+0x2d0/0x2d0 [ 1657.157345] ? __lockdep_init_map+0x100/0x5a0 [ 1657.161838] ? __lockdep_init_map+0x100/0x5a0 [ 1657.166336] __lookup_slow+0x246/0x4a0 [ 1657.170227] ? follow_dotdot_rcu+0x1040/0x1040 [ 1657.174819] ? lookup_fast+0x4e9/0x1080 [ 1657.178798] ? walk_component+0x798/0xda0 [ 1657.182953] walk_component+0x7ac/0xda0 [ 1657.186936] ? lookup_fast+0x1080/0x1080 [ 1657.190999] ? walk_component+0xda0/0xda0 [ 1657.195152] path_lookupat+0x1ff/0x8d0 [ 1657.199044] ? path_mountpoint+0xac0/0xac0 [ 1657.203275] ? rcu_nmi_exit+0xb3/0x180 [ 1657.207164] ? ____cache_alloc_node+0xf4/0x1d0 [ 1657.211752] filename_lookup+0x1ac/0x5a0 [ 1657.215814] ? filename_parentat+0x590/0x590 [ 1657.220235] ? __phys_addr_symbol+0x2c/0x70 [ 1657.224557] ? __check_object_size+0x17b/0x3d1 [ 1657.229149] ? getname_flags+0x25b/0x590 [ 1657.233219] vfs_statx+0x113/0x210 [ 1657.236759] ? do_readlinkat+0x2f0/0x2f0 [ 1657.240819] ? vfs_write+0x3d7/0x540 [ 1657.244539] __se_sys_newlstat+0x96/0x120 [ 1657.248690] ? __se_sys_newstat+0x120/0x120 [ 1657.253017] ? vfs_write+0x393/0x540 [ 1657.256729] ? fput+0x2b/0x190 [ 1657.259919] ? ksys_write+0x1c8/0x2a0 [ 1657.263718] ? __ia32_sys_read+0xb0/0xb0 [ 1657.267776] ? posix_timer_fn+0x3d0/0x3d0 [ 1657.272273] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1657.277028] ? trace_hardirqs_off_caller+0x69/0x210 [ 1657.282045] ? do_syscall_64+0x21/0x620 [ 1657.286019] do_syscall_64+0xf9/0x620 [ 1657.289824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1657.295006] RIP: 0033:0x45d239 [ 1657.298198] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1657.317096] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1657.324801] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1657.332073] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1657.339341] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.346702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 1657.353966] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:50 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x7ff, 0x3, 0x4, 0x2000, 0x3, {0x77359400}, {0x1, 0x0, 0x7e, 0x1, 0x9, 0x1b, "464ac333"}, 0x400, 0x4, @userptr=0x100000000, 0x8000, 0x0, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x2, 0x0, 0xff, 0x0, r0}) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}, 0x0, 0x7800}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="502000009b5ec12bf5de58aeef", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030b000008000200010000000cc000020002000000080002005015ecf7765dbced7244e20bf7df8e558d842ca834644558e1a42f997a088a5e92794df9957f60edfa1138db806ce47cdcf2ec07002bc9eb3bb35f1302274a59c068033f1e1a23973cce97"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="df76dea3", @ANYRES16, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0001000000fb4d755ecc1db16feb00e4ad6dcc6e115eff876da8bb085de10002117909362866890b2d5a5ed4f4b2bd3931acec83f309f4b8ab8e9aead7470fab5e1dd271d2209fab65fb3f1a0ec048472f404e3115c341c5d6681ffc2dbe23e960c932c499dce49a7d50260f0ab618fdab9e9785b6ec888ad65881f4de7942b9e9"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x1b0, 0x0, 0x0, 0x70bd2b, 0x65dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x8}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be6ba12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28c2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bb7a535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46afcfbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf812}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac98}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaf9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc004}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10051c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e111d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c55148a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27538924}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fd7e1d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ff9b8f7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x179dfc35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1833569c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f3bb2cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce65}]}, {0x4}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27721149}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe35f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa56f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x216}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a47b60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5109}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d00a55b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28577e87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21947ae7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5624ac0b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40280010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6854bbb9", @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf250100000008000100000000000800010003000000a4000c8014000b8008000a003d8e000008000a00f828000024000b8008000a00c51f00000800090013453e0c08000a00963e000008000900e6639b4834000b8008000a00d23c000008000a004de3000008000a0015fd000008000900ee7e2d740800090083571842080009009654f05734000b8008000a00778a00000800090044d4c67108000a00d9b1000008000900d42a211508000a00e48000000800090045fb6c46", @ANYRES32=0x0, @ANYRES32], 0xc8}, 0x1, 0x0, 0x0, 0x5011aab7f4adeb7d}, 0x2004c840) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="b0018000", @ANYRES16, @ANYBLOB="00042cbd7000fedbdf2502000000a4000c8014000b800800090099703439080009007980d37b34000b8008000900297df21a08000a0050b00000080009003f2a6a7708000900f87be53f08000900e622b74d080009004be1f44624000b800800090061c6917908000a008604000008000900d9ff2b0c0800090009d9027134000b8008000a0091ba000008000900b8ba2a3e08000a00234b000008000a00c36e000008000900e18a222608000a009cd40000300008802c0007800800060047000000080006008f000000080005009b807a6d08000500dd1bbd430800050093dfae69540008802400078008000600dd00000008000500d9ec665e08000500b8d5853408000500d3814d582c000780080006001a000000080006007c000000080006005600000008000500f495c54108000500e082db780800010003000000080001000000000064000880140007800800060007000000080006004d0000004c00078008000600440000000800050041ddb61508000500422a3e4a080006009e0000000800050046e4d85608000500886bb65c08000600dd000000080005001caaed1608000500eb216003"], 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb408000}, 0xc, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[@ANYBLOB="d43a0000d2851720967c859bd962c0d1a0408fec127b054671532fcc9e21e418c8b11cc5c7f55cfcb54007d8aaa2bc788c42517d06c14f10ae3d72", @ANYRES16, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x4001}, 0x8810) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x160, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2397bd97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d940b0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x684e5f4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x601e69e3}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe94aa50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e22cff1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eb4a0a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fac95b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1586d919}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x345dd3ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a635fbb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x251779a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x775dfe01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x507546f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f6c1c8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61ae8893}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49a1e637}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4008004}, 0x20040050) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4850}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x234, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e50e42d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39954986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f57571c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a466635}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb914}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x792a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39d0d4c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x425e2d92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64de1755}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66d4c9fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x830d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72c2749}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x667b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x820e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76914ae3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56a2c2f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88c4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57b8bdd9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b0d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36070bc8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5166ac3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61f9a8ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71fdbd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ae8b774}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xf, 0x5, 0x45a9acb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9a66113}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c7a295c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a6f7b97}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30cc051e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}]}, 0x234}}, 0x801) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a9b4a51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d5c4177}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27041603}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37f191b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendto$ax25(r2, &(0x7f0000000000)="7f4460fa7f98ab7e87c32ac743464310a1672338be1531b56571661f87d14a7521d4dd04bbb701e41494197232126379390bece30af5969153d4e4dda39d3e98d7e5817cc4adb582acc173367eacb5ead6d62acf61e5621e7161e30aabe14fef7fad1b1612d82a8d4bfb82a71b8c3a25afc130a2145f1c755f52069cb7fb9070bada17f25cbc798a58", 0x89, 0x4000000, &(0x7f0000000100)={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}, 0x48) 03:42:50 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/147, 0x93}) syz_open_dev$vcsn(0x0, 0x2, 0x90500) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_DST={0x4}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TIMEOUT={0x8}]}, 0x80}}, 0x0) 03:42:50 executing program 0 (fault-call:8 fault-nth:21): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) dup2(r4, r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x400000, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1658.208082] FAULT_INJECTION: forcing a failure. [ 1658.208082] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.225364] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1658.238517] CPU: 0 PID: 25846 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1658.246716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.256100] Call Trace: [ 1658.258696] dump_stack+0x1fc/0x2fe [ 1658.262338] should_fail.cold+0xa/0x14 [ 1658.266242] ? setup_fault_attr+0x200/0x200 [ 1658.270583] ? lock_acquire+0x170/0x3c0 [ 1658.274572] __should_failslab+0x115/0x180 [ 1658.279018] should_failslab+0x5/0xf [ 1658.282739] __kmalloc+0x2ab/0x3c0 [ 1658.286289] ? ovl_encode_real_fh+0x161/0x490 [ 1658.290788] ? exportfs_encode_fh+0xb2/0x110 [ 1658.295203] ovl_encode_real_fh+0x161/0x490 [ 1658.299532] ? ovl_set_attr+0x220/0x220 [ 1658.303519] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1658.308628] ? debug_check_no_obj_freed+0x201/0x482 [ 1658.313653] ovl_lookup_index+0x99/0x5a0 [ 1658.317722] ? kfree+0x110/0x210 [ 1658.321095] ? ovl_get_index_fh+0x210/0x210 [ 1658.325427] ? ovl_verify_set_fh+0x98/0x170 [ 1658.329759] ovl_lookup+0xc8b/0x1a00 [ 1658.333502] ? ovl_path_next+0x2d0/0x2d0 [ 1658.337597] ? __lockdep_init_map+0x100/0x5a0 [ 1658.342099] ? __lockdep_init_map+0x100/0x5a0 [ 1658.346606] __lookup_slow+0x246/0x4a0 [ 1658.350504] ? follow_dotdot_rcu+0x1040/0x1040 [ 1658.355098] ? lookup_fast+0x4e9/0x1080 [ 1658.359089] ? walk_component+0x798/0xda0 [ 1658.363249] walk_component+0x7ac/0xda0 [ 1658.367232] ? lookup_fast+0x1080/0x1080 [ 1658.371304] ? walk_component+0xda0/0xda0 [ 1658.375465] path_lookupat+0x1ff/0x8d0 [ 1658.379360] ? path_mountpoint+0xac0/0xac0 [ 1658.383609] ? ____cache_alloc_node+0xf4/0x1d0 [ 1658.388205] filename_lookup+0x1ac/0x5a0 [ 1658.392278] ? filename_parentat+0x590/0x590 [ 1658.396699] ? __phys_addr_symbol+0x2c/0x70 [ 1658.401028] ? __check_object_size+0x17b/0x3d1 [ 1658.405625] ? getname_flags+0x25b/0x590 [ 1658.409701] vfs_statx+0x113/0x210 [ 1658.413251] ? do_readlinkat+0x2f0/0x2f0 [ 1658.417323] ? vfs_write+0x3d7/0x540 [ 1658.421057] __se_sys_newlstat+0x96/0x120 [ 1658.425210] ? __se_sys_newstat+0x120/0x120 [ 1658.429550] ? vfs_write+0x393/0x540 [ 1658.433272] ? fput+0x2b/0x190 [ 1658.436470] ? ksys_write+0x1c8/0x2a0 [ 1658.440281] ? __ia32_sys_read+0xb0/0xb0 [ 1658.444348] ? posix_timer_fn+0x3d0/0x3d0 [ 1658.448508] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1658.453268] ? trace_hardirqs_off_caller+0x69/0x210 [ 1658.458294] ? do_syscall_64+0x21/0x620 [ 1658.462281] do_syscall_64+0xf9/0x620 [ 1658.466094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1658.471289] RIP: 0033:0x45d239 [ 1658.474486] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1658.493388] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1658.501104] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 03:42:50 executing program 5: r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) recvmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f00000001c0)=""/11, 0xb}], 0x2, &(0x7f0000000440)=""/224, 0xe0}, 0x40012041) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdiv=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRESDEC=r4, @ANYRESDEC=r4], 0x3c}}, 0x20000010) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="4ad5ad658d8612c62400000034d08bf49fc972d31667cf3a5b4f02c39565e4ccd04f878e2359fe347f2af534f3dad8bb1442c7b5ae58f0bd640936abdf685df28afaf19500cf42add3921f72d50ca3c10ed1dd84ef768a8109df5797beba1485db342484a8eee6d0cc681566da054a665f2817ede90b40707361f35ee5af85000000000000dc499551507f91a31b5600000067ab0ec030686e033db5e47889f33e6a307666b369c4b73ee2650b1d5ef37489da5b094312e68c0e110f4d9c5bf840ef4988a0f176f223a70be2453e8bb1e66f586029c1e942d49d3b2f396d37979e85fdfbb8e5427f41f801a8f19fb6324e1cee0a02810ce34c1ca3c1045d6853b8d8819bd0fcbc47facd3dc5c66cd9220f5cf223186ec9e036b5fd25b16ed91129223aa94819e23906105b5e028fcb222f89c249aa21a0d4fb682051a74da64adc9de65de325265498e8c9a417762fac1168b73a86cc1209015eeb683af2aeee869630c6fd6f42a398a4d7761666704ebac718bb04266c1bb418a760a7ebcd204e7fd845b08fa13706490aff0ec2a9afa34ce647ce941314d8b89698d08322556a6fc2722000000000000010bf3832747c791d2213d22431c8e18dd7616c984da1c39d76639799d2804562b4bbb738daf2f8", @ANYRES16=r4, @ANYBLOB="a570914fe67462c96f7bfd4197b433304a540c933b6b629d5a26ceed72554cd139d724aeddf589c850a685247371a78ae72f0654b57454af969c3dc4e2a3f0b4b0ea5a2752d1053a56ea0bfa2b18ffd5f60f039e5c4b552fb3b24768a39bb735b875bca3cf4d6f39b9199020c452b8e93d0bfc79b6121b474abac6d0"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x16c4, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x40400c4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1658.508378] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1658.515651] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.522926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1658.530199] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c 03:42:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x14b842, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ftruncate(r4, 0x100000000ff) sendfile(r2, r2, 0x0, 0x80001d00c0d3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) 03:42:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r3, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000913a8b03348f291a59004f0b00000000005445dd27dcaf9a2087067099b77c277d9cc5c106d153de29e96c3d15a147f55240544d430e724206de3ba0b7eadf7fa3b69a67b7e6ac4951fae8f2ebdd3fed3d92d049b07fe229562f8f52fa27d20e49aad1b912411dc9c6e79eaa309127e287e9d7efd84e205758d215b0c9b07a2b7091c76582bdebc370a9026c", @ANYRES32=0x0, @ANYBLOB="00000000000000002e0825df55f89a4242a7123c744b2fe81bfd3b206269e07d"], 0x20}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffe, 0x13, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x1000}}) r7 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_G_DV_TIMINGS(r9, 0xc0845658, &(0x7f0000000440)={0x0, @reserved}) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000000)={'rose0\x00', 0x5f4}) [ 1658.655752] overlayfs: unrecognized mount option "upperdiv=./file1" or missing value 03:42:50 executing program 0 (fault-call:8 fault-nth:22): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:51 executing program 1: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@local, 0x7a001, 0x0, 0xff, 0x9}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf0d}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x341}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8071}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:42:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendto$inet(r1, &(0x7f0000000000)="2efd9cd03032702dd48a3d8e", 0xc, 0x4080, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) r2 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1658.761071] overlayfs: unrecognized mount option "upperdiv=./file1" or missing value 03:42:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) dup2(r4, r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x803) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:51 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[]) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x4, 0x4) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x9, 0x4) 03:42:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2e) r5 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000080)={r2, r6, 0x1ff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x40000040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x64841, 0x0) sysfs$3(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nfc_llcp(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x27, 0x0, 0x1, 0x6, 0x8, 0x1f, "c0e5a15fa689f84288d4aff9a706994a274183363bcbab8843fea05c994cb635f33fa9c53ef62da7b2124734154fe65428af51714d06674cea1e9cb444e2cd", 0x9}, 0x60, &(0x7f0000000440), 0x0, &(0x7f0000000480)={0x100, 0x1, 0x4, "e2af31780a8eff710124d547842ebc4940a1a67edd63ae633143c2a2940a9915cd4e33db7fec0f4537cc0219497e39b3edc1525578bdd458420b53d16159f8690ad4b342b776597c6afe915b44262213a8edede319beee077e484af188d2ccfbeb9e5927ac3841960eca8941c2634da7e97d70accd2456d64f4cfe6250dafbdb6d97338f2f3bbd9df163602c10ca0ccaa39d4b541358f8faf8d81b89dbb21ff473fe2c4595f6643adb997f536ed8caa3ed07c3da2b593caf74121fb882abaa9fabf4a5c33c87cb1062456c0fd1c3cf6183c7e2ba72be573586bf3fef7837f715ffcf618ffdab271dbad7f489aa4903"}, 0x100, 0x40004}, 0x4000001) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x3c) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000100)=""/197) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000080)) preadv(r0, &(0x7f00000017c0), 0x369, 0x7ffff000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) 03:42:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02') r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:51 executing program 0 (fault-call:8 fault-nth:23): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1659.068268] FAULT_INJECTION: forcing a failure. [ 1659.068268] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.080477] CPU: 0 PID: 25932 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1659.089095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.089102] Call Trace: 03:42:51 executing program 0 (fault-call:8 fault-nth:24): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1659.089127] dump_stack+0x1fc/0x2fe [ 1659.089150] should_fail.cold+0xa/0x14 [ 1659.089169] ? setup_fault_attr+0x200/0x200 [ 1659.089186] ? lock_acquire+0x170/0x3c0 [ 1659.089206] __should_failslab+0x115/0x180 [ 1659.089222] should_failslab+0x5/0xf [ 1659.089236] __kmalloc+0x2ab/0x3c0 03:42:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fcntl$setlease(r1, 0x400, 0x1) r2 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1659.089250] ? ovl_alloc_entry+0x1e/0x70 [ 1659.089268] ovl_alloc_entry+0x1e/0x70 [ 1659.089281] ovl_lookup+0xcba/0x1a00 [ 1659.089308] ? ovl_path_next+0x2d0/0x2d0 [ 1659.089342] ? __lockdep_init_map+0x100/0x5a0 03:42:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @private1={0xfc, 0x1, [], 0x1}, 0x80, 0x0, 0xffffffff}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x404041, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) [ 1659.089358] ? __lockdep_init_map+0x100/0x5a0 [ 1659.089376] __lookup_slow+0x246/0x4a0 [ 1659.089391] ? follow_dotdot_rcu+0x1040/0x1040 [ 1659.089412] ? lookup_fast+0x4e9/0x1080 [ 1659.089431] ? walk_component+0x798/0xda0 [ 1659.089452] walk_component+0x7ac/0xda0 [ 1659.089468] ? lookup_fast+0x1080/0x1080 [ 1659.089484] ? walk_component+0xda0/0xda0 [ 1659.089504] path_lookupat+0x1ff/0x8d0 [ 1659.089520] ? path_mountpoint+0xac0/0xac0 [ 1659.089538] ? ____cache_alloc_node+0xf4/0x1d0 [ 1659.089560] filename_lookup+0x1ac/0x5a0 [ 1659.089575] ? filename_parentat+0x590/0x590 [ 1659.089598] ? __phys_addr_symbol+0x2c/0x70 [ 1659.089610] ? __check_object_size+0x17b/0x3d1 [ 1659.089633] ? getname_flags+0x25b/0x590 03:42:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1659.089656] vfs_statx+0x113/0x210 [ 1659.089673] ? do_readlinkat+0x2f0/0x2f0 [ 1659.089687] ? vfs_write+0x3d7/0x540 [ 1659.089709] __se_sys_newlstat+0x96/0x120 [ 1659.089724] ? __se_sys_newstat+0x120/0x120 [ 1659.089742] ? vfs_write+0x393/0x540 [ 1659.089756] ? fput+0x2b/0x190 [ 1659.089768] ? ksys_write+0x1c8/0x2a0 [ 1659.089783] ? __ia32_sys_read+0xb0/0xb0 [ 1659.089796] ? posix_timer_fn+0x3d0/0x3d0 03:42:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400001, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) [ 1659.089812] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1659.089825] ? trace_hardirqs_off_caller+0x69/0x210 [ 1659.089841] ? do_syscall_64+0x21/0x620 [ 1659.089859] do_syscall_64+0xf9/0x620 [ 1659.089879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1659.089890] RIP: 0033:0x45d239 [ 1659.089905] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1659.089913] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1659.089927] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1659.089935] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1659.089944] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.089953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1659.089962] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c [ 1659.134374] overlayfs: missing 'lowerdir' [ 1659.199399] FAULT_INJECTION: forcing a failure. [ 1659.199399] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.199419] CPU: 0 PID: 25971 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 1659.199428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.199432] Call Trace: [ 1659.199453] dump_stack+0x1fc/0x2fe [ 1659.199474] should_fail.cold+0xa/0x14 [ 1659.199491] ? setup_fault_attr+0x200/0x200 [ 1659.199507] ? lock_acquire+0x170/0x3c0 [ 1659.199529] __should_failslab+0x115/0x180 [ 1659.199546] should_failslab+0x5/0xf [ 1659.199559] __kmalloc+0x2ab/0x3c0 [ 1659.199573] ? ovl_get_index_name_fh+0x51/0x180 [ 1659.199591] ovl_get_index_name_fh+0x51/0x180 [ 1659.199608] ovl_lookup_index+0xca/0x5a0 [ 1659.199622] ? kfree+0x110/0x210 [ 1659.199638] ? ovl_get_index_fh+0x210/0x210 [ 1659.199656] ? ovl_verify_set_fh+0x98/0x170 [ 1659.199673] ovl_lookup+0xc8b/0x1a00 [ 1659.199700] ? ovl_path_next+0x2d0/0x2d0 [ 1659.199736] ? __lockdep_init_map+0x100/0x5a0 [ 1659.199751] ? __lockdep_init_map+0x100/0x5a0 [ 1659.199769] __lookup_slow+0x246/0x4a0 [ 1659.199785] ? follow_dotdot_rcu+0x1040/0x1040 [ 1659.199805] ? lookup_fast+0x4e9/0x1080 [ 1659.199825] ? walk_component+0x798/0xda0 [ 1659.199846] walk_component+0x7ac/0xda0 [ 1659.199863] ? lookup_fast+0x1080/0x1080 [ 1659.199880] ? walk_component+0xda0/0xda0 03:42:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:51 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmmsg$sock(r0, &(0x7f0000005440)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast2}, 0x3, 0x0, 0x4, 0x3}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000400)="915730dd9c077ce4861fd59fbd738f3fe7fe90b8bc2350d50c9f0b759797959d8e8486c8f23e4f4118e3edf82ee7439ab485cb2aef1eb52da93cc3432377449ccef54d9804c1d4f38e79aa99a67832585b547d4d5d68cde55d3eea958b721461124d60508a52d4dd81283e5d3ed5d1ed9a23f55de9fa85f328c2b631794edae869f1a4eee58cac640f71784b", 0x8c}, {&(0x7f00000004c0)="b119662537e3371aba73ff2c452529bc8ee9974f6949bf1543923cb049477a76396cfc87191e8525871c80b8ede5f58b7c6206a48005c5cdc25cffdc103cca798f46cdfb31725ce1daccfe611749915773dfec216a24acd053ec92fe8828f865e0b9728cb0d2957789d2641e06e818d0a601c30cf5e6f9cc6afb6f2d8fae01ce6f64b13325a6bebe02d526da81cb5b571e26c90bf1ba4981c60d3cd10b4641369752b9068096e5e21b271a47e7ba2b16a09dbeb9c8f1efa2f2836a531326831ef021e7d3fa3350367d138237d3641930596da151ca40d4", 0xd7}, {&(0x7f00000005c0)="dd1b5029296bb19307c284fb43b7a72042583584c6ea66c9a69269045ddcfbf76d7bf7e011445ced88a147160daad2278ca2b89214b22048f8c70c9756ea97e21c095f7153cb46c10acad5645e600599e04eb03e51c9189f7c8bc231e04f59dd18e6ebc8bcc705551aca874c7d8b1ee49ff60455a29f7e3cd841d15b1d2f3f4e2f5088116d54f6404d81b26174fbb7be22bac5d3b4eacd", 0x97}, {&(0x7f0000000680)="168dd1ff86bdcae53d2f0ab4a8ced4a06ce0c6455b475a878581478fa14264913b8c5873cf3a5734c4c85eac8c709973a31fb7a60dbbd4b8e5d53c7a9476762467f9063cf190d74c843b798d557dc6c6c05498fb7dde8dd41faeeb10af4852c56f02b035bd9ce922f546f4581858fe5a0eed90a97c59a252b2e7bfc7fa3519d0b5c3", 0x82}, {&(0x7f0000000740)="8b0d3a871cc8619eec95d18187b98b8637bbb09e6e24ad12523a20a508eb00394cd1254830c56c0e75c6452574643b48d5cdb294d186b5de93215b5527393be22ed83d8d85103e633c95d974bdb6d3781c9349603aa2a431f6fa09af14f9e19b905dea32702d53b8e4620f250875d7a23e7b7475b1cdfb3e8e90b6cb7177b88ef36e6c024049ee56cad4e9a09cb2591b0676b7cb33ba8616af7354a631ad89a25b246bc450fad6d56e3e9604976d323fce9b6e7d5620d18b799104974fef0a93a0b95ce0de3b1d34060327f7fd70900f", 0xd0}, {&(0x7f0000000840)="359c0c208f198abbacba2103f7ec0b1c82207c5a75617b776c2ec1b20be3766aee509d137fe164ef14576f57b7b82bad99f31e5619b33c9a679aa566abebd2f4f5b33368fe5ca55dc2712aac0ef08bced7228c14cffa253554f63e6814bb83a48a61601edaafc69086f9e41fd225f01ddcbe3c3848e556a55798dfe05c24860dc2546f76080aceffddd199b1cbe5978b29727eff91ba974120bcbecb082732157c46234e9cb1ac6fa67bf30dbabf47dae6c97d13bd4859651b2ad27d526e421fab5409628dd255961a81eb0c3633ed617f87fbbfdc3179faa124bdcb6d41", 0xde}], 0x6}}, {{&(0x7f00000009c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000a40)="c9b65b7f2f95c9086a04881ab4c8fcf74dd93bec0d3f51b4ee63baf69c73007c4a5274919ecab01e9dd9f3b704c4a190ec62183b334cfd2a831854070ecbfe7d128b701083d66eb2cd90d7a3936dd796f7833757306e4189e6c42265b25a6da88b9cc5aa7dc3323c5c21bf9537042cfb05fedd79eb7fba7877d80ad47e17a360787578a3059b86366d62b50c68a21daf6b695f0e298ab50e629ddb5087975c1fe9869636f94e209151ccda3d4a0cbdf717da4d7b4541b331c362f7d1e30bb63be38772dcac6c7e5ba7dea4af8d5465b5ab2aaccfa5bb936d9e23acc953d0556428ca7d4e9b222c2db6d63b280f9a06585cca2b8499efb9a85e75bdd41867f869ebfce395d64ee7e9a5a38fc6b6dcc4da9a38225dbf79831fd33eed29b6662117fdc490061fc8c6676462b7602849fda2d76ebd39e199a0868cdc70f74f72f7e05f88d19591531e89a3151cec57fdd6911dcbe751efbef3a3b9d0b7cfa004fde6eca6616df43c8fd0a27080cf20d45d659597b848cbf91ea89dd8982cc3f8b737df7c68cbca8892395adbc81e2bee6e5a19a322119723f19feaa9fc1ca60e09c89b3e5e55c15df3b36b08fb9dc2b1436b1074556e598663ef8c76012e348974d1b39b7fd7dda6608ee18af37dcbc82a8960d4a44e9ae8a4c741fe84fc486c34c2d932376f2315319b776d228a9bed812049c055a7c11a21bde74e175be5ce660f808ee0a8cbbc3d565a0be4644f0c75b22933d7c95e5362a432ff08abf088591649dd58ceb1c9dc11f228d508aaa273574beb25108e1a88a299dd5d5885e5156be429967f9fd112b3343ceb6218161e794f7eac52813c6a31629e5982f8a3a4a047784a17e6b8c75da742ea6b979dfb4bc027926fac45f17e335c661c432051a8b70a2856127b18bb8291909df06589a49af8b79b18c7b21652afe3d7ea2a6b80e589b4a6e805d6be2fc14d908a7da4004bd3958ec303e6d9788e6eaef72f5ace07d61fd2318cc3bf114c0b3833608579cf91146a56971fd767eb5e71946e28a3fed877a9e9201f122af60aed9e651ca02b394061f9d923943853bda921f80d6ba7e0f74ff6e1ac7389c18c6267a2c67de9cd0a26ea7eed01b851ddc86f064758399b0f8336ddaf0a83d6ae95ff563d0540f5adfd8944367b349ff228d8ff079b22c93ac133ba483e78d4066cf38b3e713610ad306e597a7129f21104c9107f0a76331382a0682510d4f1640f5fbd7d3ed96ad60a9069d89a9c956ba1d2b9b5f90f502db23773ad55e0ebbd8f6640c2281675430aefb201a497f288df0fe846e82c6b8e48ee3750552c6f9b3bd4c0bb894bccdba365dba8908fe791ee95886490a6ad4089cb53d3884af85e8e825594ef65c01eeacc4f346198aa78cf31ea9765f5385ddef3e9d179b32f098a6003c9414621ea0ecddbc009bc2613b1fba82db7de898e02beec8c8e9c33f0805b65641ddffd4e50d659d138e98bf0c1ebdc74791969a5e8cc4a0dcf8baccfa8919a90a82ddee9a96cdba5f00907d2f702341817377864d112bbe0aee856298e165a20505c7770fbdc55782f8d9030eb3b599abf0016b878ecacafd57c0e5661103ec3a83d4dfd72d6030c570fdd9d5598b9d3c61b313888d46d7acbc3719e1544451000e53561bcccc01546323d4342757baba652adf4e3dc026636e08354a0f52e619566d8be0f855968b2f485f294de7961030296e3c15c2d3850d27a52288c90d324b7391ceccebcd106e5b115a1aed3fd4cf98e173065e40bb6f228476834ba8e315dadd476a6a60024299606f3b4cb83aecbfbc8d214a49af0cb0ab79e2ea0a9798a74185205a4c6041c0ae2e8afb5336bf4ffcf7fdc9919e284f5c323217156440b2ed4fb80eb2275baea1e6416b93d8f81a488d3ca8beecfe713f5715c1ed5445178d95eaa35501801a6ff4b8723c5c83154c666dd88c802f019f2988d01d7848c0b3ca3f7daad682659d7c6685897fc444cd0334f850d8f2ebe729dabd6be14bcc92ec2cd0be8ae6ab69976154be132ca20f7947614ff8e1b38a936ceb3ece2b7ffdd623c57739028f2881db17438d7c97a5b5f77aa693ca4589551515cb83a6dd8a1742a35c7d4e63d1b24e1418ae375e5eb545f7c11b1f1a3407be271fc14c13d9806e36789a2a87a0856507aa2ba9debf6c3adf6fc2c94c5d1dbb47054cf7ba79e2eaebc3429d75cf94c2692305026cafde3a5d92d10fd7a98643d44a5992c12e99ccf10fbb18cfdc5f40db9d64b7c680dc7e55265d5a5c4747e67e0fb84b16cb355ae8b95abf6fbc4f11a89d6b3cde07a984b36c4ec4cf2265ab0eb41a5c580a49cc0aec1b28de1dade75017bf0ed31f308ee04a93914f6026860f800c4da2ef63c0ff475169700b575d1c4eef58c219a417eadbad0059444b0d1359c3eaa3a1bd3e9ee448c1e4c23e4906872edf86f77ca0feb2cf09e7e53985c741d7524c6ec31628302791941ae2d0a2523d46ba66076e1a5008b458453606af2427019d6a1b81575c244ee35e6b5f78e184ec1b52075094a9d6926fc1bfd84b21009935bfa7b1c15a8f0b28659b055167356665e68fb5be60d07a32a8585ddfab7e88943b7cc9f77e013c1131c47383b909f2843434f80dac7eedad465f9ae9ceb34f951deb36de6768e6cacb7284aeb8ec77f7a3fc7fa487b60b5ad99f392c3036027e632803c113be1f72edbd510e45735a494ff8136d99146a75004fc50cb46861fc22d73f4107a6423325a19229d8882696201c1c8fdc45c2a8d721194a6083f6d66804476cec6bb7704e0ccd397fdce9270a1f85cb1f035a611e5b1e667edfff834126fa5bc54524a7645bcf1f47062c2f5f93cb66f1230378cde5904c839e09d9a692e81ca546b41dffb68ac4b250c90106b18cd1403de7c986cb469e370cf4d9f185dcc7ddac55caf1acc72bd89d984eeba712685524d4847d7ab0c0d50e12f08d3933023bbf345bf4f66c667de2ccd74981748b128d2b6028efeb8344f51dcc04a27b7097d6f68e22ab6735157891fef148baa6a130b533e886c989eba096e1ea8ed842f7253bdaffac085c2132a2b25c9d85a6a21395b90931919b57e83488e31ce92328b1e436d4512b62617c2ef2c8913c55ae61f2898b1c2f91e2239ee1cb8b04c5da8ba57ef7f8c9b6a5ad620e8fecb7a3bbb12ae9d5f90b7143dc24e370d62a71d637d1681f05ab36158da30eb3d00744ff668494cdfa5b4f1b84b90b93209312b86aa31ed02b01ef3bdc60237dbe7db3b9a59008690cc9d4889cf47abe3540611a1222aa07dfc1ddbd1683fc56a2749f86d7944b04877409033ae9f70201df528ff6c8ff675e2d030e1bc88907eb53831ae0178981fb95908d7f7036f2dad8d0bf517079db7858cd1821107fd3653715473a36c84e0af69845aeae5196a30a1535ac591adeedd820cf52168d71904d39236157d4234d7ba3dab9d6de3f2694f3a7de34c78d7cb54aa54a6c68bddb1a8592066f2a966f4aea15a1014cee0f7f93ce953cbe0c1fbad87e6a1b42de4b3f8c8be5e68f1e211509fcb82bc52693bdcb61cb24189736f750e4ae2574db8443b38640bce1a7e4025f9e8779d5e5f3211eeb31a9ba36501433d7321ae917bfb06f588b137a4ff965727322b2d827b52b6a1f7125ee05263649b161c40e8a44006f7464733105263640adbc99d52350fe49d4bb8ef896c396bb1f2f6a499acd68d085936f86e507aaa09107e57f1be007f8d9cf0e17300cb057e1467076e87fac290ea72af74512069fda0d0b01f5a02d04b1ad0538750526cf25ddfd9a08b91b6f3a0a30d6958fbead3ed25293b6a49278f867bd5cca9fb3f9869791206fb3a1a780c34e5da7690ffa4fb316710b294bb25c989491d60da45052b7aff285a8a610d473c91534c5a9a689155bf5c1a68e26a1b7c0d62b168d464c9f7a7862bc3a6feef7843d4a38d25f3919270881c4b76c756a778142c34673dbcd7a42772258cf80ddcb24c665e206577623e6742c759afb0e0a0b6319b01b2fd53132b4df68d71b4a6afbe700a78a15d64534e4a4b5d6a755cc9246a05c5bce50cb5db52a95eda069404ce2f212b24fd82afd6a2de0213b28a23fa1e6f6d68d012b632d9993c1ae79c7771409e148e4e5b13ebc38e0b63b214122c716efc3a65df961b47a3fa3ec55f809bfe90e3a0a1fc4ff9bd80b9b5602f9a834b282bcc8f75b5a8f0a37bd591fe14f486020316906ce93fb488460f8f14d19c60036282b5022e9d6324e92ec9350d29ccc95ea0f010946a58fbddbcd2d9ea7f30cf668f89f92cd860eefa198099be413a6ca57f0237da99ef7bfd24e13bf01aa0f7377a99571d4e3ac5a4962d4850df08dbd6c24dd0a5841e6b62754bd8bc744814e507062b8f221a3a90180e19d182c7813acd34baa57c672aacaa24f630232de618c283b5b20c928684c2764477476490fead33826a150e649712f5a13869d0735e9e46ab142bd1a9d48bc4ea2f23917696a094fd953185903b342c457dcad5a4392bab8e44b82bca8652abe6246590d578d7040331cb2a2b4045f7b4e9ecd46a42d5964596fcd04a8813ec589deafef6323c4be76773a8703017c6737114c08b81187e97da7039761930813e8823bdca0002536622899f347004ff1cbc5d7c39bcbb7fcab01ffb0fef7d5fe043427b1ba254b5b2359722887e80945566683c79050ef8143ed6d409f30958c61666ab9f9b32ab0168d0e3f6eb6d1f7766b0b94de1013d4df8ff0e8079aab2dd2b09cee27c775cc588a98bfca5ac941b7c82ea9be604c4dc41d1400d289c2267cbd3b053d9a954f43ecf58084dda69ef58a47ccccdbb85d8a9dc3a9a5da4eea7ee9ec8f0d8d500841256f32b59846b64a060be922894f3a729e2281301f0dadb03eed44d46978ffedd8f038934fbaf740a8f6a56915de3bade8474890646dafb83180dff8e3f58451c38dad35e3b9e1053bc5a6b5f034e0219410de48a17b43de4b2b2d419cf7492839eff45dacb45946bf991b90466e2ea81692c9a7335637fb8bbee5fd95db8cfc36da0b5c54fadf9648f6ba7e832ca6a5b253a9d5e0f7fa84aec6a4090957be154f25e1a19821e2a63776a0d225135da9ecbf5cc25b5a32da0337918eed112d1b751fbeb3d4b839d5d5cd835720570899ee99886152645535db6ef901be83b9f75304d3d310ad812826bcbe8ce730172427994fc9f7b23bace607f528f1a8b2b5cc8489d10a97caa1c36b2adf8df0190a72c918343679e3ce768e1f85f5d4f9924910dd5bd26e70afe31d4ec0fc94c420b6f16884bab4026bc6f1f6904c5df4ecfece90b9bfbe81265538b6c9ed5ea6d71eee2ae5e2325cd33e433f00bf300e3339fd14918b65d3107b956ec00c55eb94aae68859885b26af9fcce0a91096a14b5ac956de06ae94c6b8d25313570a24ecb94b828c8b1a84be462859ee3331931de03966bb52482f1bd0a77ec590e2d56528e69774b9ac1a64d20416b1075b757643e0065d024d2608b1d6c35d46e9bc2f0b261eb699c2cc6e0d8777b8927b8a521c1711606aa7cacbb9a2ff49f14fd79754a3a40478ad0ee792e0b671b7a756943256f806abff2896a88ae6054cc67842b6a49c147c386a8b4ea192f2454a5893a3229372fd7831abfd204c8fd2339906b649e3671df8db2deaf85ae9663be8b1263786363b59a98cb393bed24899d892b0a8747b08aa3d7b12d4464419f59fdc364193b33c988c62df1775b85ff9b2ac65cb2d33af3926020db079d8390c33c494e389d8147fabcf96452606775c349", 0x1000}, {&(0x7f0000000040)="9cb4ba666c65798cb4708db6be87a667166367c1fb083ecde4a132353373ece820836a6167a370df91bccea1b0f452d44343902f2d", 0x35}, {&(0x7f00000001c0)}, {&(0x7f0000001a40)="5f38c190d9749a34a38a1b7a7c46938c3d5f309068263a179590554b7f60ae539114cb5b5ecf258653c69826dbbf891af6516cd46553c365b53365e43b2eb85054133538f294350eec93bce4a09d32669d1fd62656860dcb60e4058c1f8b3595de4472d2b83f5d752ae1d0ae6220b138c3afc1b8a2d04049f2101ea997532198d60004a76018df866f69f94b8bca08b0b4fa5174a798f02d34bf0e64db3c43422f002a55e75ca3d1066f2e0fead6b8d598bfbbd4316ff921fd9192f4c81667d0d2cfab5fd68348c16eb72c19cd562647c392368336d1979ccdcbc0f0e52b895bfa27ad6a55c6398934f5e03b2fd9d8a21669d2", 0xf3}], 0x4, &(0x7f0000001b80)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x38}}], 0x60}}, {{&(0x7f0000001c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x1, 0x0, 0x4, {0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fffffff}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001c80)="4154503aee44c862f776f035ef4fe0acaa727b3fce898a03153e2ecfbf850d467954b44519f8e79135b80c1d07519317bbf9b8ffdabd5fed04edf702f7e3ea32c2d1b8a76918f9aef993f46212978693e62e9371f48a6454fb495165e618d9a10ac89ffdf36d4254dc98a5fe3f1a02f530273bd8f5337503d11fa93604eac9c4286aef8eff4d4abd9c07ae4fa579b77f686b8e52e910289bcf4f477b63828591eb94", 0xa2}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="97e98423ccc756c37ef69e5ce44cb0e180e57bf62adfee0b5e59bf10e9a9266f", 0x20}, {&(0x7f0000002d80)="c618903acef94de910c3b3ad313e00fe3bb7d35df262f3b00fc5018a59c2", 0x1e}], 0x4, &(0x7f0000002e00)=[@timestamping={{0x14, 0x1, 0x25, 0xd05}}], 0x18}}, {{&(0x7f0000002e40)=@sco, 0x80, &(0x7f0000004400)=[{&(0x7f0000002ec0)="7f415131193f1296aa8dbe337e3cc00d2e5ae7fb8eaf6baf5b455cc47281ed1979c3decf6b8fdcbccfb3cd077a6eb0b6c75ea2edc9a4aa02d295835cb0d4b8e95f971aeb10960b84a3f93eac64759c86818edf2f380f7b7b2162", 0x5a}, {&(0x7f0000002f40)="781898592265eec5b92a3ea5519a71a867e3036be3ced8f29647dd4541c1ecf1b5a840b04ab514b1e14d77971b55b74b5e9e83504b03d49614f0e3441d0599e1b59a851a0dfb560124b5ea6d80f84c7ecd6e5f6cc8bc0473810784653b6afcccabb7ae6ab190132e2d163c10a77edb13f51a0a325a85693cb58bdae52bbd45c7579cd97db954d96fa69153028321475339391531f108c913445ca1ed2a8ce388ec87e637672401dbfed4bb9f2e4a76be8243d1a4c2109853f09ec617783b243c6783ba3be0bbe4aa13c411944fe63397a048544500ca47f11508d90ad931d484cf74", 0xe2}, {&(0x7f0000003040)="34e1a8752b9c9eb2c07b06294a10a99f878a66649d8d2d89909113e3e83b752288b81909b037f8f14ad6be210d778ce5164fb71ce3638784866ca03fe664223313d34fd88bb3f0e85a4ae8d7be2f382b2fd5eb0dedba90ca1f1c08926c69f627625ce104a120d90f2d7007b66ec8ae0cc4dff91206add8465480f34ed082cfcbdf2f884464d2bae20d1f2ac8fe9237fc02a16bbab199", 0x96}, {&(0x7f0000003100)="288f7ffafdf5badaa69c6674d98da60cffad50093047162b63ee0af0d43471c4b7ef6e", 0x23}, {&(0x7f0000003140)="1ba2b61c0b59eec18414110654b4ddaab55ec25ebf4a859c1f14c66ce96131dc031bcfa93c9ac4356b455aea54f8be88352da4f56dc7", 0xffffffffffffff77}, {&(0x7f0000003180)="50e56f4f74a646a7f37a57b7169333cde09fc39bfcd71283e820123f6459dcf6e9d22d6884c952fad0a0ca79fb471becbc0ecdd3f016955d1e166785b80c7c54b5bc57ab3b863a6bb482df94d9b316548c00db51f6adc2c421dc77f9db5d4874440a1fa1c01dc75217406bf69291b3ce778492a518eef7d6569b6c5d7fc3833aa410e9204fc7ea13fb8a982351abff72b7fde8d7513c659ea4d1c6cf21a9137bcffed4d209afdcec11b483b83248b4722f6e862d024b49f88e71ba8c4ab9f7923fedb448d6243e436c2c87a4f45e542dbd4284", 0xd3}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="3ca6aa6a97f455b3387dec1f554d0c78b6dd8e7c99b75f314256183558a840350c7ace44d5b0d22b9528990dbd", 0x2d}, {&(0x7f00000042c0)="27434e2a2000903197e4ec9080a18235d8f394bbf1a885d16dd87d104dc4033d6616db84f2c1d27cc9121533efccb4683ff6bacc9f9c8b2ba465cea1bcc17a59badd5044b2c71195013ae02c8680d637553531efd4f5f311e1aa4c13ab091b74322be2cdf83aa6992448f590d4f21506c694b2e08c77a6b545f28600f956cce187be066bd8b55d8b1cfd7857881df8c5f5f52bd7424783ef693c79f272ebb7dd253ed3eb7d4d0fdbd2c8113e3d295d7fae855c2f22310883375da16dc848257b0767d888849d5fc9f6da097b9440bebc1a0fd910cfdb72b04184ae82fc6b", 0xde}, {&(0x7f00000043c0)="c18ec85ad6e788f76b61961c054c37cf76ee17", 0x13}], 0xa, &(0x7f00000044c0)=[@mark={{0x0, 0x1, 0x24, 0x2}}], 0x18}}, {{&(0x7f0000004500)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004580)="508c34bbd9342f4dac27985e499380618c109da03291981ab1c7b7abf994ed45b0a641003c2c723f5f9040f075f9345041a40720e8bcb7af7eb525fca6392caf31298e5ff09b6f968ab8f06c4d32b11fce24e98c555308533976aca4ed8fc364ac", 0x61}, {&(0x7f0000004600)="8ffe672964b2f0d0a8c0fe99f901b284d1bb514d1b7d9fd2b55401539cc20fd588ebda1c56202da1d4adf19c5d8cf6ed6ca7cc6e63e8b82957168ea90b0e87497088d64962a2b83e17d6e307a514ea4d42658c357e6cc08d5ffb82d579683248262880b805e0ebe8b3b30a136878c5d5c305a9c270dacbda11428cbefecf008a0062beffc149163b1189a793a1879ae93cf7f6b19048e1591a61", 0x9a}], 0x2, &(0x7f0000004700)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}, {{&(0x7f0000004740)=@generic={0x28, "7165587d3293712b7fa3600068db1edba1e721b19d5fce3ec41b5eab01adcc6b32d0fb8e0db5e24fcddb29f850a73c8b6977fcb0601ec8327dc28ad6ced2cf54493ee6c7cbcec2b3e4b4d9f1fd7ec9960c5fa48a0e8b2cfbe8f4675529bffc9ce2bdf0669dcd657e04e9a4b2a2248a11ae2cf17e393afb4808e71d3c5ee0"}, 0x80, &(0x7f0000004980)=[{&(0x7f00000047c0)="d150e2a5b76c9bd3f4b36aaf2c7d891277c3a4fd02a052bcad1d68f839f61eba9065e4bb012c2f9af2e5b1fb2bfd36e9dd62482c20e85ef837331541745b7961881407af3ebe70b8a1463fd0078cc000e2cd89fa9fee471d135e00acc938f042eb42dd88fdd2adc7644aec5b70a5dfc5c447bba67c0ebf6a12619e99d73380", 0x7f}, {&(0x7f0000004840)="639fe9acfd7f33f2ee5adaafecf9983befad81048f733c73191da28924e38cdb587290cd8c76349389a438ccc9ed00da4585583de5c79719605838700d35a66c7704268cbea2ac396e3320e17dfac0fbfa1b6edb7d1322847ee056a7a9ffd61ca6a5ddc39fa061e91704ad4223bd2d920f", 0x71}, {&(0x7f00000048c0)="45d91aabd774cbb5b54dd93bf0e9", 0xe}, {&(0x7f0000004900)="e4c3768a902a90b19d6f6dc07830705c072026658a7d50661667cbccf836784cf6a93de0cda5dc98b84a8fcd0e", 0x2d}, {&(0x7f0000004940)="ff43b3e44af42cafbbba99b495479d8731ae8c3568dd376b4fea73ee23", 0x1d}], 0x5, &(0x7f0000005640)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14}}, @txtime={{0x18}}, @timestamping={{0x14}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004ac0)="29d3f024e8cf4c", 0x7}, {&(0x7f0000004b00)="73123f65c8dae5f11ba4c998e632e7fc02c35275c2bd9de4b21d5cd06a847f00d81b728aafe4ef9a5834d9e3c787be3a1d46bf67b229f8d1f615a11f3ee2f893f26b24e5581c3eee4b79212251c8103915a48539fa2d536d259b123c7e7bfea259813dc85a9d36ebe569f9214ba10fb682377d3db1cbe3755fdb9f373d29c1e762dd42b166aef80423663c8703b29645dfda697778683d30735de4494e059ff0fb96ddf5f125f2f7c7e02be0a220693a7cb062cdff5618f44b120958cfa1673df5f8211d2ef4f494fc9e2ebbc4908e859c8b1cb63d9fcc19a690a133e0c5f7fe6459b7", 0xe3}, {&(0x7f0000004c00)="11879c98af44548ddd2326a0d6934f9f982f1a541b3a7dd1903659f1376e6d904f56f3d883e10680e04f58ce8ba0eedce29530d91582392c72b8048f83535790469783a06479e4c8842bca100cb576f1c278972be1a147127419aac226842bf9e49e4d05d40c32a080916a26ebd8a2c980", 0x71}, {&(0x7f0000004c80)="76a15644b76a14c5917ed2361c01ee2a2a8578f2951b45e3a6205536f5a97cb2f57056de2bb3ee4f006b3e8c1068ce9dc067ce578a1a20d2eb7757d225fc2aaf25df343d21ca65c15863387463599f4fdaf86cd2837f46a23fdccc0ecc98d58a80cb418b376ee7bed320fa916525b85958e2737b78dc08aaae6ef769e5de0ef9cb127f3a1b1fb02d3cba25ab5f444a16eca853072a817cb4c0ce0ec53d09bd15e5a6ee916eabc902398eddde6da64fce711a7d30b6da2a85a0f2280644e59d9160b48f93b5492d8f3ada8a62cb069b8fc5270f88644ee6981230c0e22a3ef50b47d5ee0fb52fe3a2d04668ea0ae96337b6cd808240681a", 0xf7}, {&(0x7f00000001c0)="2fa80e194f37832fbc68f57d8f2632f6929f40e0ba8d85f6daffbe449220a4"}, {&(0x7f0000004dc0)="d4c336d421d74083f3a3aa8cb4b288bb9b82a2905cd33d40b92d673a543b6f1bce1e4bfb950af8f26d36b86d550544d14edd5695bdf7141948faaeb6b394365e077d6fbcff49c7eb7d8644b8449496c171754cd177a74476366eeafa53918ce189f4b28b59736a75dc01846b9a7903fab101ceaccb6d5142baa565fc85ecdd06c4005791960c3563dbba4b5c141def6d08454a81cfc5157ffafa19a5b52263dbd3a12e603aadf2f8261759aab2f301bc05e9e9f587c657ccea5b2bd038e5f5d2b8b9582741bce56eacd34ba3cf", 0xcd}, {&(0x7f0000004ec0)="4183cc4d24451e1852d449457879567c71963cc2a6ed0787c8a89e3e0ca2d169c7d6a44f9b63cc33dbd0b9351fe6001a253d7e71339f10b8995a529ec0e4dbaac1ad4617dba1b790dbc22f4a7a91951deb759825c98846f64449b0ba92e481079e6f83c4e05d8e23bd7e436de347c7bd6879bff7ddd06c2ec40b2033e2ad78d5ac0d527bee9fca5956a3721c5b0d14749969eced27bc5eae8bfb00", 0x9b}, {&(0x7f0000004f80)="ad8dcfb31f38044b0885bbbfa7a5c0d16fac7663f73e03aa9804300aa5d03b12fc46d462c1bf60ed974f83ada5c2b4e742ec98b86a29b50ce7dfe4bb527ddd2986bc7b237c27cc0d31723fc9573576c1bf9992906ab43713fec5b3a92f4ccaca4a1b8b12113b9abc35c2775782ba9b39ccfba93b4fdfcc5e603ec87f11036b23d99bc68883e516ae18", 0x89}], 0x8, &(0x7f00000050c0)}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000005100)="fcde094813fe53a66af4af99ef6456ebe31ffb44c7c628c048530dfba66e5700bd6bfd09d5dd5c9bb97b3bbf3552ed94dcdc5be17a740ebffdaab758b3f012be065f4e89d6ce51b021a02f8d776011d549f45d74bf367a4d98e2e174522f22befc002f26cfe3c9aff73bf949c165fc18dcf23554a33da4", 0x77}, {&(0x7f0000005180)="afb442fc3e76bc732dfdaa05a2bd8accf9b53618c4e0ffdfc15864", 0x1b}, {&(0x7f00000051c0)="c4441ec0", 0x4}, {&(0x7f0000005200)="14d5c765e9564aa8b461e489e2d1f9831d4ecfb6a50e690b0fb02daed59b36830e73c335f2af79bb719a603d36228855b86a19a6b538a8d10f1ce3a3a747cf1f107cc2b396d78ba6d440f4bc1fa4e2dd5a38e225c626cefead3cf5e8be9309a73ea05c271b604e8fe5c410d2431195f9bcd328ae422d09d10c60c31bf056d4d203be2ec3ca2be4616a4414a03140c587a9d407b175832c59ce32f63ee2ac3cd9b53c7b1b68844cddd596a2f953bc7f23ee8ebf956e70d6e977ee9f12622d8718ab2f9b921d589ae13bfadef9bd150ac0fe812c4aaab76401b4", 0xd9}, {&(0x7f0000005300)}], 0x5, &(0x7f00000053c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}], 0x60}}], 0x8, 0x4000000) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000004a00)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f62757308006f726b6469723d2e2f66696c65302c6d65f0ac8a79d0b81cb4cb0275790d78245c1e71feb6ac8c96495a41e95e03f7e00aa593f46c8fa0035029e60b1c985cc72056b5db5491c4c4dc31a5e7683a642705b252ed37808ef720cc9808a86dc47d536b9d3901c68373fbca2ae059e4805b2a8e07daa02c6d0a7e697e3520871400bb30604f9615bf9c381ebc6f273c47e442eea3889380248f"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:52 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) write$binfmt_script(r1, &(0x7f0000000740)={'#! ', './file0', [{}, {0x20, '@'}, {0x20, 'syz2\x00'}, {0x20, 'ip6_vti0\x00'}], 0xa, "0cec4faa4fac56862d6a29ed8b007f4b5f25072926b94eb239d60a0dd6860bc607e56026eb67e49bde1b9ac61f2fbc462f513ab8e13f043339d8b82e3417c667fc7a4a9ccc886e422a90a6a7a38c2afe4bb7d7d44ecc7de863cfed8308cf30ba92da6fbc5dcbf0eabaf0c83f66fcd21941c3d40e1d982828bc0edaa2cd10fb29471619b41311a2af206e83d66f9ef16f38e91c37f2e60dc3a81a6e793f10fd32be50d15b26eb9a5c2ce51922c92e5d6d4cb52843330f183ba9dc7747581a1853df5e4293c84e49974b9378609074d1fd1adf5e78"}, 0xf2) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x324, 0x7, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x2bc, 0x4, 0x0, 0x1, [{0x13c, 0x1, 0x0, 0x1, [@range={{0xa, 0x1, 'range\x00'}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xb8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "a452582310ce2df74eeaf3b7d4206b26a81f9070759b6ccc6a4cf77ad8618bb1924c9cee8979102622918bda60a5294a6297b808bcc319598351c96eaabe369c409f0812bb953f6ad4055818e201701254f85a1b497aedc0ade3144a14d0574e502e61853e8831daee7109b4134440481582298bc7256bb074d0666373c0fb7e460260291f5356f977cc69362142acb32a0ae22f165f7e5f0a7b3179b3f039ce91659bb4e0689fda48e1ff4e103f7c"}]}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x7, 0x1, '$R\x00'}, @NFTA_MATCH_INFO={0x2a, 0x3, "0ba61f434e776bd7e362d1677528c204988696adafdf664804139564808ffaa671a1adc6efd0"}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @void}]}, {0x18, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}]}, {0xc, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x9c, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}]}, {0x70, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7f}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}]}, {0x40, 0x1, 0x0, 0x1, [@nat={{0x8, 0x1, 'nat\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x8}]}}]}, {0xc, 0x1, 0x0, 0x1, [@dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4000}, 0x0) lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000900), 0x6000) 03:42:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000006d0010002dbd7000ffdbdf250000000077224a0888eae98a499124b5a3d55f3141fdc72da8c87d5a142838f63ab979b071f980c57e1ef3c31f5d451accd04e1ab3984f50b96193bf0fdfeac51fdab1f71bc1101a6a6bc57c4fe4917b4d90c618af172a216bae78726243a0", @ANYRES32=r5, @ANYBLOB="001200002080000040003480140035007465616d30000000000000000000000014003500626f6e6430000000000000000000000014003500766972745f7769666930000000000000"], 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0x0, 0x0, 0x4, 0x0, @private0, @rand_addr=' \x01\x00', 0x0, 0x8, 0x2000000}}) [ 1659.199902] path_lookupat+0x1ff/0x8d0 [ 1659.199920] ? path_mountpoint+0xac0/0xac0 [ 1659.199939] ? ____cache_alloc_node+0xf4/0x1d0 [ 1659.199961] filename_lookup+0x1ac/0x5a0 [ 1659.199977] ? filename_parentat+0x590/0x590 [ 1659.200008] ? __phys_addr_symbol+0x2c/0x70 [ 1659.200022] ? __check_object_size+0x17b/0x3d1 [ 1659.200045] ? getname_flags+0x25b/0x590 [ 1659.200069] vfs_statx+0x113/0x210 [ 1659.200084] ? do_readlinkat+0x2f0/0x2f0 [ 1659.200097] ? vfs_write+0x3d7/0x540 [ 1659.200120] __se_sys_newlstat+0x96/0x120 [ 1659.200135] ? __se_sys_newstat+0x120/0x120 [ 1659.200153] ? vfs_write+0x393/0x540 [ 1659.200165] ? fput+0x2b/0x190 [ 1659.200178] ? ksys_write+0x1c8/0x2a0 [ 1659.200197] ? __ia32_sys_read+0xb0/0xb0 [ 1659.200209] ? posix_timer_fn+0x3d0/0x3d0 [ 1659.200225] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1659.200238] ? trace_hardirqs_off_caller+0x69/0x210 [ 1659.200254] ? do_syscall_64+0x21/0x620 [ 1659.200272] do_syscall_64+0xf9/0x620 [ 1659.200292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1659.200303] RIP: 0033:0x45d239 [ 1659.200316] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1659.200324] RSP: 002b:00007fa1beedec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1659.200337] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1659.200345] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000280 [ 1659.200354] RBP: 00007fa1beedeca0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.200361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1659.200370] R13: 00007ffc8255a71f R14: 00007fa1beedf9c0 R15: 000000000118cf4c [ 1659.281638] overlayfs: missing 'lowerdir' [ 1659.811440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=109 sclass=netlink_route_socket pid=26003 comm=syz-executor.4 [ 1659.867068] overlayfs: missing 'workdir' 03:42:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) dup2(r4, r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:52 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x900) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x5, 0x10, [0xf9, 0x7, 0x6, 0x400]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(r3, &(0x7f0000000000)='./file0\x00', 0x200842, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r5 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') r7 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r9, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x2}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r9, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x40010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2d, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) [ 1659.898036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=109 sclass=netlink_route_socket pid=26009 comm=syz-executor.4 03:42:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) [ 1660.165529] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:42:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) dup2(r0, r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1660.324983] overlayfs: missing 'workdir' 03:42:52 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x122) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x9a, 0x0) 03:42:52 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1084010, &(0x7f00000003c0)=ANY=[@ANYBLOB="757070657264697200cbcfd2ec6d9c75aa5c84010000696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) r5 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_proto_private(r5, 0x89e4, &(0x7f0000000400)="b9113bd1eedf5537d1f4b3f31628e49ff3aaed6e167cecfc95d4c0f0da77f8143498ad24a8c6414b501e8f7a8abbd1d39381745daf5f1e20079d49e673265d674906c9d84adc6640898c6150dbac656ea2eec9bb52410887f38e209bee6707c9715b5a9659ca29168bcd0390778dbfda3a497520ea50f62c26e4517c5db27119ef55d0aa461d2186d07ab379e05392b9dd261a38a0b0a089db1766ed02fe2d0ed9ec55e474b89b138d28dd6c1133d54e90565c797667e68420bac6e91d8795463a2c99f1de5972eb69d4664736e0027c526dd02e78") getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7c, &(0x7f0000000000)={r6}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYBLOB="4638eb915b13d8d9be25e81e6047"], &(0x7f0000000140)=0x12) 03:42:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x10}}) 03:42:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:52 executing program 4: r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan1\x00', {0x4}, 0xaef}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) [ 1660.774496] 8021q: VLANs not supported on ipvlan1 03:42:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0, 0x26}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2e) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x8e98, 0x0, 0x1}, &(0x7f0000000100)=[{}]) preadv(r0, &(0x7f00000017c0), 0x1fd, 0x0, 0x0) 03:42:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xa00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) [ 1660.904520] 8021q: VLANs not supported on ipvlan1 [ 1660.923127] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:42:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x98) r2 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:53 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bond0\x00', {0x4}, 0x1000}) mount$overlay(0x400002, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000}}]}}]}, 0x48}}, 0x0) 03:42:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1661.157966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1661.237431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:42:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r3 = dup(r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r4 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000000)) 03:42:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) [ 1661.442047] overlayfs: unrecognized mount option "" or missing value 03:42:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1661.536721] overlayfs: unrecognized mount option "" or missing value 03:42:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xf00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) getsockname$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x28480, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000100)={'netpci0\x00', 0xdfa, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:54 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file1\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:54 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r5, r3}}, 0x5b) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e20, 0x3384, @private1={0xfc, 0x1, [], 0x1}, 0xfffffffe}, r5}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x1, {0xa, 0x4e24, 0x6, @private2, 0xad}, r5}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r6}}, 0x18) 03:42:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7800}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:42:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x11, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', r3, 0x8087, 0x10, 0x95f5, 0xa4d, {{0x2c, 0x4, 0x0, 0x8, 0xb0, 0x65, 0x0, 0x7c, 0x4, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x9, 0x3, 0x5, [{@remote, 0x24b3}, {@multicast1, 0x4}, {@empty, 0x7fffffff}]}, @timestamp_prespec={0x44, 0x54, 0xd3, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000006}, {@multicast1, 0x468}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x800}, {@remote, 0x100}, {@broadcast, 0x7f}, {@empty, 0x101}, {@empty, 0x2}, {@multicast1, 0x3}, {@private=0xa010101, 0x1}, {@multicast2, 0x5c}]}, @rr={0x7, 0x2b, 0x8f, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="757056a14ad669723d2ec6e4e5868ea021776f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d6561636f70793d6f6ecda2247bfcdfc0bb220ee7d45a58665f27ea985f570e709ba269a17872f700"]) chdir(&(0x7f0000000340)='./bus\x00') open(&(0x7f0000000080)='./file0/file0\x00', 0x24840, 0x0) 03:42:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) [ 1662.358708] overlayfs: unrecognized mount option "upV¡JÖir=.Æä冎 !wowerdir=./bus" or missing value [ 1662.407189] audit: type=1800 audit(1597635774.629:955): pid=26161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16785 res=0 03:42:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) [ 1662.474759] overlayfs: unrecognized mount option "upV¡JÖir=.Æä冎 !wowerdir=./bus" or missing value [ 1662.502608] audit: type=1800 audit(1597635774.729:956): pid=26161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16785 res=0 03:42:54 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x82a) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 03:42:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) 03:42:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000080)="95c6138791290960c835c05a91a1c88cf328a3a6c894aa22e73a734c2e36e8e28f0e3ab34b33649be37ac1f96be9a62184504769e6eafce70f66f020341efed9e5ad313b536ee2c6033c39b4c4702cdfccf79593d0eafc840e379becf95c94", 0x5f}) sysfs$1(0x1, &(0x7f0000000040)='gfs2\x00') 03:42:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0xfb8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$nbd(r1, &(0x7f0000000440)={0x67446698, 0x0, 0x3, 0x4, 0x2, "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"}, 0x1010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8000, 0x0, 0x1b1}}) 03:42:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r7, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x2}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000240)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @empty, 0x7ff}}, 0x24) 03:42:55 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000340)) [ 1663.161120] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:42:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7570706572047cc4082e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b646f70793d6f6e00"/59]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) 03:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) recvfrom$ax25(r1, &(0x7f0000000000)=""/75, 0x4b, 0x40, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r2 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x32}}}) 03:42:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x110, r2, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 1663.208160] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1663.301000] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1663.315416] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1663.334261] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 03:42:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file1\x00') lstat(&(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)) [ 1663.358249] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1663.385384] overlayfs: unrecognized mount option "upper|Ä./file1" or missing value [ 1663.420111] overlayfs: unrecognized mount option "upper|Ä./file1" or missing value 03:42:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) r1 = socket(0x100000000011, 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0xe0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xfc) getsockname(r1, &(0x7f0000000400)=@isdn, &(0x7f0000000380)=0x80) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) 03:42:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f0000000040)='./bus/file1\x00', &(0x7f0000000140)) 03:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCNOTTY(r1, 0x5422) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000440)={0x6, 0x1, 0x4, 0x100, 0x2, {0x0, 0xea60}, {0x5, 0x0, 0x6, 0x9, 0x7a, 0x48, "24c39481"}, 0x7, 0x2, @userptr=0x8, 0x0, 0x0, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vhost_msg(r3, &(0x7f0000000300)={0x1, {&(0x7f0000000200)=""/214, 0xd6, &(0x7f0000000040)=""/49, 0x1, 0x3}}, 0x48) r4 = dup(r0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)="3a045df2fb53efa2dd5da5db76a495bcf9a4bb7195b431552f5437315764a53c6f45aa0fb480a7a8a62c0853e5977bc94496288c2d3d4daaaf2da20f5f5df55da52a432eefe79e70a27db935441f1dee7e82254ad5220b701970511aa8b0b322f2c3072e609bb024ba24c7b0a6fbf02b3b3752fc263ea8188b763d9de48bb0d43d930c166653737ce38bc5d768442bad1127b4b9905f47d8d39239f8c1d13fcf4aa49c8f509fed490a03ac15f95dc44139169ad51aa2f537782b0a8b38ea3f72dc6b66db47cf594f638c514f04977d511b6e3d7801") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) [ 1663.475024] kasan: CONFIG_KASAN_INLINE enabled [ 1663.485583] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1663.515847] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1663.522104] CPU: 0 PID: 26215 Comm: syz-executor.5 Not tainted 4.19.139-syzkaller #0 [ 1663.529980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.539343] RIP: 0010:security_inode_getattr+0x46/0x140 [ 1663.544706] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 04 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 08 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d7 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 1663.563609] RSP: 0018:ffff88820b9afae8 EFLAGS: 00010202 [ 1663.566275] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1663.568966] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9001052f000 [ 1663.568975] RDX: 000000000000000b RSI: ffffffff831ae55e RDI: 0000000000000058 [ 1663.568982] RBP: ffff88820b9afbb8 R08: 0000000000000001 R09: 0000000000000000 [ 1663.568988] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 1663.568995] R13: ffff88820b9afbb8 R14: 0000000000000400 R15: 0000000000000000 [ 1663.569004] FS: 00007f9cc10ec700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1663.569011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1663.569019] CR2: 0000000002981a58 CR3: 00000000533b6000 CR4: 00000000001426f0 [ 1663.569028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1663.569034] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1663.569038] Call Trace: [ 1663.569057] vfs_getattr+0x22/0x60 [ 1663.569075] ovl_getattr+0x8fb/0xe10 03:42:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="686964652c631f06af5466742c6d6f6465013078300d3030ffff000035300e3030f1d93030302c00f65cb6381d428d840c3581b5ad0fb12948986cd4680a4499cb3f92c5e68df9785b63bd79f02a12a738f4cb014da47d7291d44a4047adce938a6c2570be6760bb9c3745afbb36b53e51145588e872d47a2e414b1db80b2c971fcfb813799694ca4a05692f8a14afecdd9146729b64061456c8b0974c39f1c533e60a6349518f940fff561b97eebfe9a531cf018350ff1e5c30d29c32949f"]) r0 = socket(0x100000000011, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast2}}}) unlink(&(0x7f00000001c0)='./file1\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x106) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x7, 0x5, 0x4, 0x5, 0x2, 0x14, 0x8], 0x11}, 0x0, 0x11, 0x2, 0x0, 0x0, 0x20c200a2, r7}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900000000000092cdb3000600150000007bce080038000000000000000000000000000030e5958abb2b5c8f1f69e831109c6b57b22b5ab4a437fcbd9924c1da8abad01acfe98488f7c9c95b4030cecd129cb7e6e8fe0babd0339f039ccab794f681714efb67508c535ba2032984ee932f3595ea00a2eb4e9b66a0956b7b5fb7e4e456037393c7564a1d166c9e2a8c1aaa4aa11c", @ANYRESHEX=0x0, @ANYBLOB="08000300", @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r8, @ANYBLOB="00b9fcde", @ANYRES32=r7, @ANYRES32, @ANYRES64, @ANYBLOB="08000b00290300040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b729576c16eb0425fb5c0206bc9f6330ab8c07a9d7cfe74c34ac49548dd31d9cea7c777b8403d2bdd3ea8ed93184262e1f367c3f1a37ce772a08a9d6739e88ffb23f6e172db876d4399d45222b24129000000", @ANYRES64=r9, @ANYBLOB="9fcbe3d2472d5f24171b60e68b1a059400692062b342705613b82d3dc19dc0f5ba667f3d337cd74797b63ca94cb030129d7a13ab74803721e77a436496037fca78b1719ff1d397ffdf1d04ba829de2d3c0435d14c69c00"], 0x70}}, 0x20000001) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x14a, {0x1, 0x3, 0x6}, 0x142, r2, r9, 0x1, 0x1, 0xebff, 0x1, 0x2, 0x5, 0x1f, 0x400, 0x1ff, 0x7fff, 0x9, 0x8001, 0x4, 0x100000000}}, 0xa0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000500009c000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040003000000000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="10000100000000002000060000000000"], 0x7c, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x2}], {0x4, 0x2}, [{}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x4, r9}], {0x10, 0x4}, {0x20, 0x2}}, 0x74, 0x3) mq_unlink(&(0x7f0000000200)='\'.h\xe7:\\,\x00') connect(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x2, 0x1, 0x0, 0x4}}, 0x80) [ 1663.664414] ? ovl_inode_set+0x40/0x40 [ 1663.668307] ? filename_parentat+0x590/0x590 [ 1663.672712] ? inode_has_perm+0x17d/0x210 [ 1663.676852] ? selinux_inode_getattr+0x1e3/0x270 [ 1663.681596] ? selinux_inode_getxattr+0x1f0/0x1f0 [ 1663.686419] ? getname_flags+0x25b/0x590 [ 1663.690473] ? ovl_inode_set+0x40/0x40 [ 1663.694361] vfs_getattr_nosec+0xff/0x160 [ 1663.698507] vfs_statx+0x15a/0x210 [ 1663.702037] ? do_readlinkat+0x2f0/0x2f0 [ 1663.706078] __se_sys_newlstat+0x96/0x120 [ 1663.710213] ? __se_sys_newstat+0x120/0x120 [ 1663.714524] ? put_timespec64+0xcb/0x120 [ 1663.718591] ? posix_timer_fn+0x3d0/0x3d0 [ 1663.722727] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1663.727460] ? trace_hardirqs_off_caller+0x69/0x210 [ 1663.732454] ? do_syscall_64+0x21/0x620 [ 1663.736407] do_syscall_64+0xf9/0x620 [ 1663.740191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1663.745378] RIP: 0033:0x45d239 [ 1663.748556] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1663.767446] RSP: 002b:00007f9cc10ebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1663.775132] RAX: ffffffffffffffda RBX: 000000000001fb00 RCX: 000000000045d239 [ 1663.782380] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000020000040 [ 1663.789628] RBP: 000000000118cf78 R08: 0000000000000000 R09: 0000000000000000 [ 1663.796875] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1663.804161] R13: 00007fff9b6cf8ff R14: 00007f9cc10ec9c0 R15: 000000000118cf4c [ 1663.811410] Modules linked in: 03:42:56 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000002a220000000002000000030000004002170000004000edffffff0000000008"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') splice(r2, 0x0, r1, 0x0, 0x400020064d, 0x1802) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x57, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff60000050d0000050000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_SECUREBITS(0x1c, 0x4) 03:42:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 03:42:56 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x10, &(0x7f0000000140)={&(0x7f0000000040)=""/13, 0xd}}, 0x10) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469053d2e2f66696c65312c6c6f776572390500002e2f6275732c776f726b6469723d2e2f66696c65302c6d657461637b171f6d6f6e"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') [ 1663.834039] ---[ end trace 320859c35af31d2d ]--- [ 1663.844503] RIP: 0010:security_inode_getattr+0x46/0x140 [ 1663.862809] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 04 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 08 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d7 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 1663.896214] overlayfs: unrecognized mount option "upperdi=./file1" or missing value [ 1663.904714] RSP: 0018:ffff88820b9afae8 EFLAGS: 00010202 [ 1663.914197] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9001052f000 [ 1663.922224] RDX: 000000000000000b RSI: ffffffff831ae55e RDI: 0000000000000058 [ 1663.931240] overlayfs: unrecognized mount option "upperdi=./file1" or missing value [ 1663.931414] RBP: ffff88820b9afbb8 R08: 0000000000000001 R09: 0000000000000000 [ 1663.957954] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 1663.974912] R13: ffff88820b9afbb8 R14: 0000000000000400 R15: 0000000000000000 [ 1663.988663] FS: 00007f9cc10ec700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1663.997077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1664.003740] CR2: 00007f59035b2db8 CR3: 00000000533b6000 CR4: 00000000001426e0 [ 1664.011574] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1664.019509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1664.026844] Kernel panic - not syncing: Fatal exception [ 1664.033710] Kernel Offset: disabled [ 1664.037337] Rebooting in 86400 seconds..