ile0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  395.495081] audit: type=1326 audit(1549450807.671:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15277 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  395.571151] overlayfs: failed to resolve './file1': -2
11:00:07 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  395.665952] IPVS: ftp: loaded support on port[0] = 21
[  395.706988] IPVS: ftp: loaded support on port[0] = 21
[  395.762688] overlayfs: failed to resolve './file1': -2
11:00:08 executing program 0:
mkdir(0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  396.005390] overlayfs: failed to resolve './file1': -2
11:00:08 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4)

11:00:08 executing program 0:
mkdir(0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  396.228366] overlayfs: failed to resolve './file1': -2
11:00:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  396.277769] IPVS: ftp: loaded support on port[0] = 21
[  396.444845] audit: type=1326 audit(1549450808.613:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15319 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:00:25 executing program 2:

11:00:25 executing program 5:

11:00:25 executing program 0:
mkdir(0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:25 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:00:25 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  413.916787] overlayfs: failed to resolve './file1': -2
11:00:26 executing program 5:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(r1)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x40, 0x2, 0x1})
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
dup(0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e21, @local}})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x26b7, {{0xa, 0x4e24, 0x4b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x1f000000}}}, 0x88)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x2007fff)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe)
ftruncate(r3, 0xfffffffffffffffa)
unlink(&(0x7f0000000040)='./bus\x00')
unlink(&(0x7f0000000200)='./bus\x00')
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0)

11:00:26 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
getsockopt$sock_int(r0, 0x1, 0x9, &(0x7f000059dffc), &(0x7f0000000040)=0x15a)

[  413.986313] audit: type=1326 audit(1549450826.007:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15331 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:00:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  414.081421] IPVS: ftp: loaded support on port[0] = 21
11:00:26 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x28101, 0x0)
write$P9_RVERSION(r0, 0x0, 0x0)

[  414.243088] IPVS: ftp: loaded support on port[0] = 21
11:00:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:26 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f00000001c0))
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

11:00:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:26 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  414.988262] IPVS: ftp: loaded support on port[0] = 21
11:00:36 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:00:36 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:36 executing program 5:
dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nr0\x01\x00\x00\xdf\xcf\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd82, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:00:36 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000300)='rdma.max\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7f)

11:00:36 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:36 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')

[  424.709435] audit: type=1326 audit(1549450836.638:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15389 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  424.731412] device nr0
 entered promiscuous mode
11:00:36 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab9919ec", 0x4)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x1000001e2)
recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000400)=""/135, 0x87}, {0x0}, {&(0x7f0000000700)=""/179, 0xb3}], 0x5}}], 0x1, 0x0, 0x0)

[  424.994992] IPVS: ftp: loaded support on port[0] = 21
11:00:37 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  425.042161] IPVS: ftp: loaded support on port[0] = 21
11:00:37 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  425.490659] cgroup: fork rejected by pids controller in /syz5
[  425.696231] audit: type=1326 audit(1549450837.620:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15528 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:00:46 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:46 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:46 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/62, 0x3e}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)

11:00:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:00:46 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  434.448453] audit: type=1326 audit(1549450846.297:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15539 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:00:46 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
rt_sigqueueinfo(r0, 0x2c, &(0x7f0000000000)={0x2f, 0xac, 0x4})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace$setregs(0xf, r0, 0x80, &(0x7f0000000140)="c0f35804d41b87fddb87cabc253b3979a6b8d26e7a2d19eeb0ae7df0edc7889317af487a4ea522f445eaefb58b458e7ace8270d53c5e2e4ea8af7901c8c4b66548ecbe252b4881ef2b2a169030bb787233d20adb2218cee21c170f760e013033da1b0efbf05fea55427a2772b641707d7f25880757626844991da28a6e624fd8527671aad64b8a74b2699e108be9bbb31e9ae13c52e4b4dca2e22e5cc64226bebc62b8a39c25565e0e79aa")
tkill(r0, 0x2a)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000200)="ee3e61e330a392acc82a4f8ef0314435bce803f24e6593b48aade1fdf8b01cdf15cf4fc6a8180cff2a9c87f1868bf1f60d4c023c4116040200000000000000faf1db1854c9a65f7f5e09b02eeb8c6fae738b1b9b78cbc95762fcb65b535ddc08")
ptrace$cont(0x20, r0, 0x0, 0x0)

11:00:46 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:46 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  434.615207] IPVS: ftp: loaded support on port[0] = 21
[  434.665567] overlayfs: missing 'lowerdir'
11:00:46 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:46 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  434.717917] IPVS: ftp: loaded support on port[0] = 21
11:00:46 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  434.860995] overlayfs: missing 'lowerdir'
[  434.889159] IPVS: ftp: loaded support on port[0] = 21
11:00:46 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  435.020735] IPVS: ftp: loaded support on port[0] = 21
[  435.091628] overlayfs: missing 'lowerdir'
11:00:47 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:00:47 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  435.339065] overlayfs: missing 'lowerdir'
11:00:47 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  435.524432] audit: type=1326 audit(1549450847.368:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15589 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  435.563305] overlayfs: missing 'lowerdir'
[  435.872982] IPVS: ftp: loaded support on port[0] = 21
11:00:55 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:55 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:55 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:00:55 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:55 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  444.262147] overlayfs: missing 'lowerdir'
[  444.341360] audit: type=1326 audit(1549450856.115:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15612 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:00:56 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  444.469230] IPVS: ftp: loaded support on port[0] = 21
[  444.485440] IPVS: ftp: loaded support on port[0] = 21
[  444.488037] IPVS: ftp: loaded support on port[0] = 21
11:00:56 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  444.598441] overlayfs: missing 'lowerdir'
11:00:56 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  444.814713] overlayfs: missing 'lowerdir'
11:00:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:00:56 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  445.073202] overlayfs: missing 'lowerdir'
11:00:56 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:57 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:00:57 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  445.363503] overlayfs: unrecognized mount option "lowerdir" or missing value
[  445.383173] audit: type=1326 audit(1549450857.147:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15646 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  445.603748] IPVS: ftp: loaded support on port[0] = 21
11:00:57 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:00:57 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,wor'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  445.914717] overlayfs: unrecognized mount option "lowerdir" or missing value
[  446.138819] overlayfs: unrecognized mount option "wor" or missing value
11:01:06 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  455.145814] IPVS: ftp: loaded support on port[0] = 21
11:01:07 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:07 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:01:07 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,wor'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:07 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:07 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:07 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,wor'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  455.869986] audit: type=1326 audit(1549450867.540:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15686 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  455.871991] IPVS: ftp: loaded support on port[0] = 21
[  455.904673] IPVS: ftp: loaded support on port[0] = 21
[  455.947255] IPVS: ftp: loaded support on port[0] = 21
[  455.967519] IPVS: ftp: loaded support on port[0] = 21
11:01:07 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  456.130857] overlayfs: unrecognized mount option "wor" or missing value
11:01:08 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  456.412850] overlayfs: workdir and upperdir must be separate subtrees
11:01:08 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:01:08 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:08 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  456.761410] IPVS: ftp: loaded support on port[0] = 21
11:01:08 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  456.901809] audit: type=1326 audit(1549450868.571:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15728 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  456.929878] IPVS: ftp: loaded support on port[0] = 21
11:01:08 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  457.125434] IPVS: ftp: loaded support on port[0] = 21
[  457.132917] overlayfs: workdir and upperdir must be separate subtrees
11:01:08 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./fi'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:08 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  457.393963] overlayfs: failed to resolve './fi': -2
[  457.418051] IPVS: ftp: loaded support on port[0] = 21
11:01:09 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./fi'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:01:09 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  457.738740] overlayfs: failed to resolve './fi': -2
11:01:09 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./fi'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:09 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  457.895520] IPVS: ftp: loaded support on port[0] = 21
[  457.929465] audit: type=1326 audit(1549450869.582:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15769 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  458.025950] IPVS: ftp: loaded support on port[0] = 21
[  458.032848] overlayfs: failed to resolve './fi': -2
11:01:09 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  458.279603] overlayfs: failed to resolve './file': -2
11:01:10 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  458.354514] IPVS: ftp: loaded support on port[0] = 21
[  458.555417] overlayfs: failed to resolve './file': -2
11:01:21 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:01:21 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:21 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  470.309194] overlayfs: failed to resolve './file': -2
[  470.493389] audit: type=1326 audit(1549450882.038:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15800 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  470.724619] IPVS: ftp: loaded support on port[0] = 21
[  470.816125] IPVS: ftp: loaded support on port[0] = 21
11:01:23 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:01:23 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:23 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  471.910558] audit: type=1326 audit(1549450883.456:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15819 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:01:23 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  472.102881] IPVS: ftp: loaded support on port[0] = 21
[  472.111321] IPVS: ftp: loaded support on port[0] = 21
11:01:23 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:24 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  472.893740] audit: type=1326 audit(1549450884.428:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15845 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:01:38 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:38 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  486.698928] audit: type=1326 audit(1549450898.114:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15853 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:01:38 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:38 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:38 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  487.408126] IPVS: ftp: loaded support on port[0] = 21
[  487.468635] IPVS: ftp: loaded support on port[0] = 21
11:01:39 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:01:39 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

11:01:39 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:39 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x64, 0x2)

[  488.446956] audit: type=1326 audit(1549450899.849:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15878 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  488.460549] IPVS: ftp: loaded support on port[0] = 21
11:01:40 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)

[  489.234399] IPVS: ftp: loaded support on port[0] = 21
11:01:42 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:42 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)

[  491.532869] IPVS: ftp: loaded support on port[0] = 21
[  492.249714] IPVS: ftp: loaded support on port[0] = 21
11:01:49 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:01:49 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:49 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)

11:01:49 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:49 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  497.856843] audit: type=1326 audit(1549450909.181:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15924 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:01:49 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x5c, 0x2)

[  497.929391] IPVS: ftp: loaded support on port[0] = 21
[  498.043116] IPVS: ftp: loaded support on port[0] = 21
11:01:49 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x54, 0x2)

11:01:49 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:01:49 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x4c, 0x2)

11:01:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  498.613622] IPVS: ftp: loaded support on port[0] = 21
[  498.629641] IPVS: ftp: loaded support on port[0] = 21
[  498.665428] IPVS: ftp: loaded support on port[0] = 21
11:01:50 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x44, 0x2)

[  498.806732] audit: type=1326 audit(1549450910.123:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15960 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:02:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:02:05 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:05 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x3c, 0x2)

11:02:05 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:05 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:05 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:05 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x34, 0x2)

[  514.555989] audit: type=1326 audit(1549450925.732:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15975 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  514.774148] IPVS: ftp: loaded support on port[0] = 21
[  514.786784] IPVS: ftp: loaded support on port[0] = 21
[  514.805588] IPVS: ftp: loaded support on port[0] = 21
11:02:06 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}], {}, {0x20, 0x1}}, 0x2c, 0x2)

11:02:06 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x2)

11:02:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  515.333335] IPVS: ftp: loaded support on port[0] = 21
11:02:06 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x2)

[  515.513969] audit: type=1326 audit(1549450926.694:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16005 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:02:06 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:02:07 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x101d0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0)
r3 = dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0x4004af07, 0x0)

11:02:21 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
clone(0x6102001dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EVIOCGREP(r0, 0x80084503, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

11:02:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  530.176739] audit: type=1326 audit(1549450941.233:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16025 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:02:21 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:21 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:21 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:21 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:21 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0xffffffffffffffaf)
r1 = socket$unix(0x1, 0x1, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
listen(r1, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r2 = accept$inet6(r1, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x1ba)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x0)

[  530.476269] IPVS: ftp: loaded support on port[0] = 21
11:02:21 executing program 0:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x9, 0xfffffffffffffeff, 0x401, 0xffffffffffffffe1}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nr0\x01\x00\x00\xdf\xcf\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)='\x00', <r2=>0xffffffffffffffff}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r2}, 0x30)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuac\b\x00\xc0F\xfb\xebge_percpu_sys\x00', 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  530.589212] IPVS: ftp: loaded support on port[0] = 21
[  530.589580] IPVS: ftp: loaded support on port[0] = 21
[  530.622789] IPVS: ftp: loaded support on port[0] = 21
[  530.858116] device nr0
 entered promiscuous mode
11:02:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:02:22 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  531.227964] audit: type=1326 audit(1549450942.284:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16064 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:02:22 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:22 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/207, 0xcf)

11:02:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  532.205377] audit: type=1326 audit(1549450943.246:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16083 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:02:23 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})

11:02:35 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:35 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:35 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:02:35 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:35 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0)

[  544.459961] IPVS: ftp: loaded support on port[0] = 21
11:02:35 executing program 0:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = gettid()
write$nbd(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x14)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  544.616167] audit: type=1326 audit(1549450955.553:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16114 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  544.800267] IPVS: ftp: loaded support on port[0] = 21
[  544.827757] IPVS: ftp: loaded support on port[0] = 21
[  544.935347] IPVS: ftp: loaded support on port[0] = 21
11:02:35 executing program 0:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)

11:02:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  545.472196] audit: type=1326 audit(1549450956.406:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16143 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:02:36 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0)

11:02:36 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/109, 0x6d}], 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:02:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  546.510969] audit: type=1326 audit(1549450957.427:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16158 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:02:50 executing program 0:
syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="5000000090780000"], 0x0)

11:02:51 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:51 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:02:51 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:51 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:02:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  560.898040] audit: type=1326 audit(1549450971.698:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16173 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  560.973983] IPVS: ftp: loaded support on port[0] = 21
[  561.007497] IPVS: ftp: loaded support on port[0] = 21
[  561.159922] IPVS: ftp: loaded support on port[0] = 21
[  561.164881] audit: type=1326 audit(1549450971.966:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16181 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  561.165687] IPVS: ftp: loaded support on port[0] = 21
11:02:52 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  561.500419] IPVS: ftp: loaded support on port[0] = 21
11:02:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:02:52 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  561.821538] audit: type=1326 audit(1549450972.610:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16205 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  562.015444] IPVS: ftp: loaded support on port[0] = 21
11:02:52 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  562.393397] IPVS: ftp: loaded support on port[0] = 21
11:02:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:02:53 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  562.745796] audit: type=1326 audit(1549450973.532:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16220 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  563.234989] IPVS: ftp: loaded support on port[0] = 21
11:03:05 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:06 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:06 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:03:06 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:06 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  575.671956] audit: type=1326 audit(1549450986.355:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16242 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  575.894679] IPVS: ftp: loaded support on port[0] = 21
[  575.936197] IPVS: ftp: loaded support on port[0] = 21
[  575.945934] IPVS: ftp: loaded support on port[0] = 21
[  576.026329] IPVS: ftp: loaded support on port[0] = 21
11:03:06 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:03:07 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  576.653170] audit: type=1326 audit(1549450987.317:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16272 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  576.925751] IPVS: ftp: loaded support on port[0] = 21
11:03:07 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  577.676369] audit: type=1326 audit(1549450988.339:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16287 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:08 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:08 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  578.139607] IPVS: ftp: loaded support on port[0] = 21
11:03:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  578.698715] audit: type=1326 audit(1549450989.350:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16304 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  578.740689] IPVS: ftp: loaded support on port[0] = 21
11:03:20 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:20 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  590.535214] IPVS: ftp: loaded support on port[0] = 21
[  590.605396] IPVS: ftp: loaded support on port[0] = 21
11:03:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r1, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12)

11:03:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:03:21 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:21 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  590.888255] audit: type=1326 audit(1549451001.439:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16325 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  590.896037] IPVS: ftp: loaded support on port[0] = 21
11:03:21 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  590.942182] IPVS: ftp: loaded support on port[0] = 21
11:03:21 executing program 0:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getpgrp(0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0xc0000, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000780))
r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x24001)
write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0', [{0x20, '*md5sum'}, {}, {}, {0x20, 'net/icmp\x00'}, {0x20, '&'}, {0x20, 'mime_type\x8amime_typecpusetself!securityself+\xc8'}, {0x20, '^&'}, {0x20, ':'}, {0x20, '\xa9wlan0system-self'}], 0xa, "badf5b5f29c401fb5074dbce587f85fa34ef0f016f30920787c10c701933f0ce772574fac04329e93354ba1c5ee944f769c78c3797b7c9263574efac93be166eaaa795c3d9a0678d6381f32043ea587c6c528a21dddff4fcb3d77d10d0aaac15d5bf60b04c938696bed9f3e79476db4fb7eb40ee47d41abf2b2b53c3a44edbb34c83818440071bad8fa327b2ce33c6c8a7090894a5ef7bf9b842ded51357f9a59c09434da2a8f8b76b4330327aae80d5b74520bacbec9db6b047acae3b60da1e9e869c87d9815b1c9ae560b31a0dce06c7f1"}, 0x137)
r3 = fcntl$getown(r1, 0x9)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
syz_open_procfs(r3, &(0x7f0000000340)='net/icmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="da9dd25dd061cc4e9780d348d05acfcf486cd34aede9a4228f42677da488f5945c88f753621918b8b49484e311000104ddf650aa17024e3dc9520a5b170ea679491554dfed7a2477e0af54a28e6af576522ec4078a674c61b1d6e173fd325b7da3ff3667f473d5194980a040203330341acb7fb26a4fb1341cccf3c3e58c56307073f2fb4fc93a3f850511d89ffc40b20391e9e232a80eb444716405ff355bac0ca3771c81c6edc29603b4f1a8a8cd765b25f488a67612a94f4ed18f8bab5b75c48dc2259a2dc9a8ed2b83cad50bdaba0707ea8ee14c79f72a22005f360f"], @ANYRESHEX=0x0], @ANYPTR64=0xffffffffffffffff, @ANYRESDEC, @ANYPTR64, @ANYPTR, @ANYRESOCT=0x0], 0x4b}, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1)

11:03:21 executing program 0:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getpgrp(0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0xc0000, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000780))
r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x24001)
write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0', [{0x20, '*md5sum'}, {}, {}, {0x20, 'net/icmp\x00'}, {0x20, '&'}, {0x20, 'mime_type\x8amime_typecpusetself!securityself+\xc8'}, {0x20, '^&'}, {0x20, ':'}, {0x20, '\xa9wlan0system-self'}], 0xa, "badf5b5f29c401fb5074dbce587f85fa34ef0f016f30920787c10c701933f0ce772574fac04329e93354ba1c5ee944f769c78c3797b7c9263574efac93be166eaaa795c3d9a0678d6381f32043ea587c6c528a21dddff4fcb3d77d10d0aaac15d5bf60b04c938696bed9f3e79476db4fb7eb40ee47d41abf2b2b53c3a44edbb34c83818440071bad8fa327b2ce33c6c8a7090894a5ef7bf9b842ded51357f9a59c09434da2a8f8b76b4330327aae80d5b74520bacbec9db6b047acae3b60da1e9e869c87d9815b1c9ae560b31a0dce06c7f1"}, 0x137)
r3 = fcntl$getown(r1, 0x9)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
syz_open_procfs(r3, &(0x7f0000000340)='net/icmp\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="da9dd25dd061cc4e9780d348d05acfcf486cd34aede9a4228f42677da488f5945c88f753621918b8b49484e311000104ddf650aa17024e3dc9520a5b170ea679491554dfed7a2477e0af54a28e6af576522ec4078a674c61b1d6e173fd325b7da3ff3667f473d5194980a040203330341acb7fb26a4fb1341cccf3c3e58c56307073f2fb4fc93a3f850511d89ffc40b20391e9e232a80eb444716405ff355bac0ca3771c81c6edc29603b4f1a8a8cd765b25f488a67612a94f4ed18f8bab5b75c48dc2259a2dc9a8ed2b83cad50bdaba0707ea8ee14c79f72a22005f360f"], @ANYRESHEX=0x0], @ANYPTR64=0xffffffffffffffff, @ANYRESDEC, @ANYPTR64, @ANYPTR, @ANYRESOCT=0x0], 0x4b}, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1)

11:03:21 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  591.311912] IPVS: ftp: loaded support on port[0] = 21
11:03:21 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:22 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0)
close(r1)
close(r0)

11:03:22 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:03:22 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6002})

[  591.837774] IPVS: ftp: loaded support on port[0] = 21
[  591.975802] IPVS: ftp: loaded support on port[0] = 21
[  591.987982] audit: type=1326 audit(1549451002.530:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16379 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  592.050025] IPVS: ftp: loaded support on port[0] = 21
11:03:22 executing program 0:
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000600)="fd62486f2d8b9ff8a2bd6313772a59f003f434c45fab624622430236e2279538d7d5541fc102ead041a8cd4e7df90ff5f9b0763a", 0x0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000540)='./file0\x00'}, 0x10)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000940))
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000a00))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x50, &(0x7f0000000100)}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0xfffffffffffffdbe)
r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='memory.stat\x00', 0x0, 0x0)
write$cgroup_int(r4, &(0x7f0000000800)=0x8001, 0x12)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000500)=0x7fffffff)
recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@hci={0x1f, <r5=>0x0}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000640)=""/180, 0xb4}], 0x1, &(0x7f0000000700)=""/234, 0xea}, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000095000000000000009500"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x1, [], r5, 0xb}, 0x48)
write$cgroup_type(r2, &(0x7f0000001900)='th\b\x00aded\x00', 0xfdef)

[  592.502854] device nr0
 entered promiscuous mode
11:03:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  592.907033] audit: type=1326 audit(1549451003.442:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16403 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:23 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
read(r0, &(0x7f0000000080)=""/68, 0x44)

11:03:36 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:36 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:03:36 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  605.914811] audit: type=1326 audit(1549451016.344:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16415 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  606.052658] IPVS: ftp: loaded support on port[0] = 21
[  606.085635] IPVS: ftp: loaded support on port[0] = 21
[  606.250954] IPVS: ftp: loaded support on port[0] = 21
11:03:36 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:36 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:37 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  606.907954] IPVS: ftp: loaded support on port[0] = 21
[  606.966485] audit: type=1326 audit(1549451017.385:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16450 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  607.018768] IPVS: ftp: loaded support on port[0] = 21
[  607.063829] IPVS: ftp: loaded support on port[0] = 21
11:03:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a00))
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  607.990021] audit: type=1326 audit(1549451018.397:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16456 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a00))
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  609.025843] audit: type=1326 audit(1549451019.428:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16462 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a00))
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  610.026014] audit: type=1326 audit(1549451020.420:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16469 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  611.140547] audit: type=1326 audit(1549451021.521:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16475 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:56 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:03:56 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:57 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  626.908120] audit: type=1326 audit(1549451037.160:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16484 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  626.978033] IPVS: ftp: loaded support on port[0] = 21
[  627.036038] IPVS: ftp: loaded support on port[0] = 21
11:03:57 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:03:57 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  627.337551] IPVS: ftp: loaded support on port[0] = 21
11:03:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  627.572988] IPVS: ftp: loaded support on port[0] = 21
[  627.762693] IPVS: ftp: loaded support on port[0] = 21
[  627.804296] audit: type=1326 audit(1549451038.052:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16514 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  628.785139] audit: type=1326 audit(1549451039.024:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16519 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:03:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x0)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  629.980545] audit: type=1326 audit(1549451040.204:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16526 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x0)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  630.886396] audit: type=1326 audit(1549451041.107:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16531 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x0)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  631.994460] audit: type=1326 audit(1549451042.188:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16537 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  633.042110] audit: type=1326 audit(1549451043.239:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16543 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:04:15 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  645.815333] audit: type=1326 audit(1549451055.913:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16549 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  645.870503] IPVS: ftp: loaded support on port[0] = 21
11:04:16 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:16 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
close(0xffffffffffffffff)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:16 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:04:16 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  646.390680] IPVS: ftp: loaded support on port[0] = 21
[  646.460746] IPVS: ftp: loaded support on port[0] = 21
[  646.512876] IPVS: ftp: loaded support on port[0] = 21
11:04:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  646.577182] audit: type=1326 audit(1549451056.677:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16564 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  646.675291] IPVS: ftp: loaded support on port[0] = 21
[  646.817086] audit: type=1326 audit(1549451056.915:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16586 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  647.447715] audit: type=1326 audit(1549451057.529:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16591 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, 0x0, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  647.742649] audit: type=1326 audit(1549451057.817:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16596 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:04:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, 0x0, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  648.481315] audit: type=1326 audit(1549451058.561:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16601 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  648.777289] audit: type=1326 audit(1549451058.848:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16606 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0x1200e)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  649.388690] audit: type=1326 audit(1549451059.453:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16611 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, 0x0, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  649.817653] audit: type=1326 audit(1549451059.880:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16616 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:04:27 executing program 0 (fault-call:4 fault-nth:0):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:04:27 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:27 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:27 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:27 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  658.056680] FAULT_INJECTION: forcing a failure.
[  658.056680] name failslab, interval 1, probability 0, space 0, times 1
[  658.080223] CPU: 1 PID: 16643 Comm: syz-executor0 Not tainted 5.0.0-rc5 #60
[  658.087368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  658.097270] Call Trace:
[  658.099964]  dump_stack+0x172/0x1f0
[  658.103684]  should_fail.cold+0xa/0x1b
[  658.107590]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  658.112154] IPVS: ftp: loaded support on port[0] = 21
[  658.112756]  ? lock_downgrade+0x810/0x810
[  658.122151]  ? ___might_sleep+0x163/0x280
[  658.126364]  __should_failslab+0x121/0x190
[  658.130644]  should_failslab+0x9/0x14
[  658.134452]  kmem_cache_alloc_node_trace+0x270/0x720
[  658.139609]  ? check_stack_object+0x114/0x160
[  658.144142]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  658.144162]  __kmalloc_node+0x3d/0x70
[  658.153162]  kvmalloc_node+0x68/0x100
[  658.156984]  setxattr+0x16f/0x380
[  658.160447]  ? vfs_setxattr+0x100/0x100
[  658.164423]  ? lock_downgrade+0x810/0x810
[  658.164443]  ? kasan_check_read+0x11/0x20
[  658.172717]  ? __lock_is_held+0xb6/0x140
[  658.172796]  ? check_preemption_disabled+0x48/0x290
[  658.172845]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[  658.187295]  ? preempt_count_add+0xbc/0x1b0
[  658.187311]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  658.187326]  ? __mnt_want_write+0x1f1/0x2f0
[  658.194270] IPVS: ftp: loaded support on port[0] = 21
[  658.197159]  ? __mnt_want_write_file+0x89/0xc0
[  658.197180]  __x64_sys_fsetxattr+0x1fe/0x290
[  658.197244]  do_syscall_64+0x103/0x610
[  658.197264]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  658.206759] RIP: 0033:0x457e39
[  658.206774] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  658.206782] RSP: 002b:00007f89e241fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  658.206795] RAX: ffffffffffffffda RBX: 00007f89e241fc90 RCX: 0000000000457e39
[  658.206807] RDX: 0000000020000c40 RSI: 00000000200001c0 RDI: 0000000000000003
[  658.261834] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  658.261843] R10: 0000000000000024 R11: 0000000000000246 R12: 00007f89e24206d4
[  658.261852] R13: 00000000004be677 R14: 00000000004cf000 R15: 0000000000000004
[  658.262691] audit: type=1326 audit(1549451068.081:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16626 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:28 executing program 0 (fault-call:4 fault-nth:1):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  658.438494] IPVS: ftp: loaded support on port[0] = 21
[  658.491282] IPVS: ftp: loaded support on port[0] = 21
[  658.726592] FAULT_INJECTION: forcing a failure.
[  658.726592] name failslab, interval 1, probability 0, space 0, times 0
[  658.739277] CPU: 1 PID: 16651 Comm: syz-executor0 Not tainted 5.0.0-rc5 #60
[  658.746393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  658.755741] Call Trace:
[  658.755807]  dump_stack+0x172/0x1f0
[  658.755829]  should_fail.cold+0xa/0x1b
[  658.755848]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  658.755868]  ? ___might_sleep+0x163/0x280
[  658.762074]  __should_failslab+0x121/0x190
[  658.762093]  should_failslab+0x9/0x14
[  658.775190]  __kmalloc+0x2dc/0x740
[  658.775206]  ? check_noncircular+0x20/0x20
[  658.775292]  ? posix_acl_alloc+0x24/0xb0
[  658.795047]  posix_acl_alloc+0x24/0xb0
[  658.798950]  posix_acl_from_xattr+0xfe/0x470
[  658.803372]  ? save_stack+0x45/0xd0
[  658.807008]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  658.812108]  ? kasan_kmalloc+0x9/0x10
[  658.812205]  ovl_posix_acl_xattr_set+0xc7/0x9a0
[  658.812223]  ? ovl_put_super+0x50/0x50
[  658.824554]  ? mark_held_locks+0x100/0x100
[  658.828797]  ? __lock_is_held+0xb6/0x140
[  658.832853]  ? should_fail+0x14d/0x85c
[  658.832869]  ? __sanitizer_cov_trace_cmp1+0x17/0x20
[  658.841746]  ? xattr_resolve_name+0x291/0x3e0
[  658.846246]  ? ovl_put_super+0x50/0x50
[  658.850124]  __vfs_setxattr+0x121/0x190
[  658.854088]  ? xattr_resolve_name+0x3e0/0x3e0
[  658.858656]  ? evm_protect_xattr.isra.0+0x9e/0x3e0
[  658.863582]  __vfs_setxattr_noperm+0x11c/0x410
[  658.868155]  vfs_setxattr+0xda/0x100
[  658.871859]  setxattr+0x26f/0x380
[  658.875298]  ? vfs_setxattr+0x100/0x100
[  658.879265]  ? lock_downgrade+0x810/0x810
[  658.883401]  ? kasan_check_read+0x11/0x20
[  658.887538]  ? __lock_is_held+0xb6/0x140
[  658.891582]  ? check_preemption_disabled+0x48/0x290
[  658.896591]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[  658.902028]  ? preempt_count_add+0xbc/0x1b0
[  658.906333]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  658.911855]  ? __mnt_want_write+0x1f1/0x2f0
[  658.916166]  ? __mnt_want_write_file+0x89/0xc0
[  658.920734]  __x64_sys_fsetxattr+0x1fe/0x290
[  658.925131]  do_syscall_64+0x103/0x610
[  658.929011]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  658.934185] RIP: 0033:0x457e39
[  658.937366] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  658.956251] RSP: 002b:00007f89e2440c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  658.963952] RAX: ffffffffffffffda RBX: 00007f89e2440c90 RCX: 0000000000457e39
11:04:29 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  658.971208] RDX: 0000000020000c40 RSI: 00000000200001c0 RDI: 0000000000000003
[  658.978463] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  658.985717] R10: 0000000000000024 R11: 0000000000000246 R12: 00007f89e24416d4
[  658.992973] R13: 00000000004be677 R14: 00000000004cf000 R15: 0000000000000004
11:04:29 executing program 0 (fault-call:4 fault-nth:2):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:04:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  659.403533] IPVS: ftp: loaded support on port[0] = 21
11:04:29 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  659.425571] audit: type=1326 audit(1549451069.410:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16661 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:29 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='tystem.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:04:30 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  660.097526] overlayfs: filesystem on './file0' not supported as upperdir
[  660.417621] audit: type=1326 audit(1549451070.392:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16684 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  660.602375] IPVS: ftp: loaded support on port[0] = 21
11:04:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:04:42 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='uystem.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:04:42 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:42 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:42 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  672.811476] audit: type=1326 audit(1549451082.679:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16694 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  672.994903] IPVS: ftp: loaded support on port[0] = 21
11:04:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='syttem.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  673.040518] IPVS: ftp: loaded support on port[0] = 21
[  673.212429] IPVS: ftp: loaded support on port[0] = 21
[  673.229099] IPVS: ftp: loaded support on port[0] = 21
11:04:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:04:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='syutem.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  673.663872] overlayfs: filesystem on './file0' not supported as upperdir
[  673.781107] audit: type=1326 audit(1549451083.641:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16725 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='syssem.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  674.105144] overlayfs: filesystem on './file0' not supported as upperdir
11:04:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.potix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:04:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  674.509506] overlayfs: filesystem on './file0' not supported as upperdir
[  674.890202] audit: type=1326 audit(1549451084.742:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16738 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:04:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.pouix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  675.430691] overlayfs: filesystem on './file0' not supported as upperdir
11:04:58 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7"], 0x62)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:04:58 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_accets\x00', &(0x7f0000000c40), 0x24, 0x0)

11:04:58 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:58 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  688.959902] overlayfs: filesystem on './file0' not supported as upperdir
[  688.997546] IPVS: ftp: loaded support on port[0] = 21
[  689.011598] IPVS: ftp: loaded support on port[0] = 21
11:04:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_acceus\x00', &(0x7f0000000c40), 0x24, 0x0)

[  689.098334] audit: type=1326 audit(1549451098.844:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16760 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  689.206439] IPVS: ftp: loaded support on port[0] = 21
[  689.222127] IPVS: ftp: loaded support on port[0] = 21
[  689.576996] overlayfs: filesystem on './file0' not supported as upperdir
11:04:59 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:04:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_accest\x00', &(0x7f0000000c40), 0x24, 0x0)

11:04:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7"], 0x62)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  689.953183] audit: type=1326 audit(1549451099.687:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16791 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  689.992147] IPVS: ftp: loaded support on port[0] = 21
11:04:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_accesu\x00', &(0x7f0000000c40), 0x24, 0x0)

11:05:00 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:00 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x02', &(0x7f0000000c40), 0x24, 0x0)

[  690.391124] overlayfs: filesystem on './file0' not supported as upperdir
[  690.745044] IPVS: ftp: loaded support on port[0] = 21
[  690.809958] overlayfs: filesystem on './file0' not supported as upperdir
11:05:12 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7"], 0x62)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:05:12 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:12 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:05:12 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:12 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  703.160955] audit: type=1326 audit(1549451112.777:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16828 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  703.205638] overlayfs: filesystem on './file0' not supported as upperdir
11:05:12 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  703.336140] IPVS: ftp: loaded support on port[0] = 21
[  703.348457] IPVS: ftp: loaded support on port[0] = 21
[  703.356888] IPVS: ftp: loaded support on port[0] = 21
[  703.367900] IPVS: ftp: loaded support on port[0] = 21
11:05:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:05:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8"], 0x93)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:05:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  704.105279] overlayfs: filesystem on './file0' not supported as upperdir
[  704.114063] audit: type=1326 audit(1549451113.719:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16858 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:05:14 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:05:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8"], 0x93)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  704.960790] overlayfs: filesystem on './file0' not supported as upperdir
[  705.235218] audit: type=1326 audit(1549451114.840:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16874 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:05:28 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:28 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x2}}, 0x24, 0x0)

[  718.618796] overlayfs: filesystem on './file0' not supported as upperdir
11:05:28 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8"], 0x93)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:05:28 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:28 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:28 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x4}}, 0x24, 0x0)

[  718.721208] IPVS: ftp: loaded support on port[0] = 21
[  718.958279] overlayfs: filesystem on './file0' not supported as upperdir
[  718.987234] IPVS: ftp: loaded support on port[0] = 21
11:05:28 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x8}}, 0x24, 0x0)

[  719.055756] audit: type=1326 audit(1549451128.545:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16891 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  719.058191] IPVS: ftp: loaded support on port[0] = 21
[  719.181812] IPVS: ftp: loaded support on port[0] = 21
11:05:28 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x10}}, 0x24, 0x0)

[  719.337022] overlayfs: filesystem on './file0' not supported as upperdir
11:05:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57"], 0xab)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:05:29 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:29 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  719.710060] overlayfs: filesystem on './file0' not supported as upperdir
[  720.023058] IPVS: ftp: loaded support on port[0] = 21
[  720.096906] audit: type=1326 audit(1549451129.576:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16927 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  720.158907] IPVS: ftp: loaded support on port[0] = 21
11:05:44 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x300}}, 0x24, 0x0)

[  735.842275] overlayfs: filesystem on './file0' not supported as upperdir
[  736.081741] IPVS: ftp: loaded support on port[0] = 21
11:05:45 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:05:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57"], 0xab)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:05:45 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x700}}, 0x24, 0x0)

11:05:45 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  736.751188] overlayfs: filesystem on './file0' not supported as upperdir
11:05:46 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  736.851093] audit: type=1326 audit(1549451146.187:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16955 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:05:46 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0xffffff1f}}, 0x24, 0x0)

11:05:46 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  736.938068] IPVS: ftp: loaded support on port[0] = 21
[  737.001478] IPVS: ftp: loaded support on port[0] = 21
11:05:46 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  737.250336] overlayfs: filesystem on './file0' not supported as upperdir
11:05:46 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x2}}, 0x24, 0x0)

[  737.418008] IPVS: ftp: loaded support on port[0] = 21
[  737.425987] IPVS: ftp: loaded support on port[0] = 21
11:05:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57"], 0xab)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  737.521037] IPVS: ftp: loaded support on port[0] = 21
[  737.806024] overlayfs: filesystem on './file0' not supported as upperdir
[  737.816526] audit: type=1326 audit(1549451147.149:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16994 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:05:47 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x1000000}}, 0x24, 0x0)

11:05:47 executing program 1:
r0 = userfaultfd(0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  738.238814] overlayfs: filesystem on './file0' not supported as upperdir
11:05:47 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x2000000}}, 0x24, 0x0)

11:05:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95"], 0xb7)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  738.608797] overlayfs: filesystem on './file0' not supported as upperdir
11:05:48 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x100000000000000}}, 0x24, 0x0)

[  738.782398] IPVS: ftp: loaded support on port[0] = 21
[  738.848036] audit: type=1326 audit(1549451148.171:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17015 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  739.039830] overlayfs: filesystem on './file0' not supported as upperdir
11:05:59 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  751.008493] IPVS: ftp: loaded support on port[0] = 21
11:06:00 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:00 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x200000000000000}}, 0x24, 0x0)

11:06:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95"], 0xb7)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:06:00 executing program 1:
r0 = userfaultfd(0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:00 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:00 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  751.553515] audit: type=1326 audit(1549451160.775:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17034 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  751.646864] IPVS: ftp: loaded support on port[0] = 21
11:06:00 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0xffffffff00000000}}, 0x24, 0x0)

[  751.759379] IPVS: ftp: loaded support on port[0] = 21
[  751.843013] IPVS: ftp: loaded support on port[0] = 21
[  751.879778] IPVS: ftp: loaded support on port[0] = 21
[  752.041140] overlayfs: filesystem on './file0' not supported as upperdir
11:06:01 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x0, 0x2}}, 0x24, 0x0)

11:06:01 executing program 4:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:01 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95"], 0xb7)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  752.408750] overlayfs: filesystem on './file0' not supported as upperdir
11:06:01 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x0, 0x1000000}}, 0x24, 0x0)

[  752.687896] IPVS: ftp: loaded support on port[0] = 21
[  752.745490] audit: type=1326 audit(1549451161.955:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17085 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  752.768484] IPVS: ftp: loaded support on port[0] = 21
[  752.974998] overlayfs: filesystem on './file0' not supported as upperdir
11:06:17 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:17 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x0, 0x2000000}}, 0x24, 0x0)

11:06:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000"], 0xbd)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  768.140305] audit: type=1326 audit(1549451177.218:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17097 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  768.194986] overlayfs: filesystem on './file0' not supported as upperdir
[  768.485757] IPVS: ftp: loaded support on port[0] = 21
11:06:17 executing program 1:
r0 = userfaultfd(0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:17 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x0, 0x100000000000000}}, 0x24, 0x0)

11:06:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000"], 0xbd)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  768.957400] overlayfs: filesystem on './file0' not supported as upperdir
11:06:18 executing program 4:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:18 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x0, 0x200000000000000}}, 0x24, 0x0)

[  769.172735] IPVS: ftp: loaded support on port[0] = 21
[  769.186771] audit: type=1326 audit(1549451178.259:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17117 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  769.321179] overlayfs: filesystem on './file0' not supported as upperdir
[  769.393010] IPVS: ftp: loaded support on port[0] = 21
11:06:18 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x0, 0xffffffff00000000}}, 0x24, 0x0)

11:06:18 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:18 executing program 1:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  769.746898] overlayfs: filesystem on './file0' not supported as upperdir
11:06:18 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x2}}, 0x24, 0x0)

[  769.969906] IPVS: ftp: loaded support on port[0] = 21
[  769.984621] IPVS: ftp: loaded support on port[0] = 21
[  770.155836] overlayfs: filesystem on './file0' not supported as upperdir
11:06:33 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000"], 0xbd)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:06:33 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x8}}, 0x24, 0x0)

11:06:33 executing program 4:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:33 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  784.675910] overlayfs: filesystem on './file0' not supported as upperdir
11:06:33 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x10}}, 0x24, 0x0)

[  784.773658] audit: type=1326 audit(1549451193.720:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17156 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  784.808125] IPVS: ftp: loaded support on port[0] = 21
[  784.809466] IPVS: ftp: loaded support on port[0] = 21
[  785.011612] overlayfs: filesystem on './file0' not supported as upperdir
[  785.044724] IPVS: ftp: loaded support on port[0] = 21
11:06:34 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x2}}, 0x24, 0x0)

11:06:34 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:34 executing program 4:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  785.201864] overlayfs: filesystem on './file0' not supported as upperdir
11:06:34 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x1000000}}, 0x24, 0x0)

11:06:34 executing program 1:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  785.433592] IPVS: ftp: loaded support on port[0] = 21
[  785.444844] IPVS: ftp: loaded support on port[0] = 21
[  785.501354] overlayfs: filesystem on './file0' not supported as upperdir
11:06:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000"], 0xc0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  785.711484] audit: type=1326 audit(1549451194.652:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17209 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  785.761557] IPVS: ftp: loaded support on port[0] = 21
11:06:44 executing program 4:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x2000000}}, 0x24, 0x0)

11:06:44 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:44 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000"], 0xc0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  795.445888] overlayfs: filesystem on './file0' not supported as upperdir
[  795.489353] audit: type=1326 audit(1549451204.341:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17220 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  795.515458] IPVS: ftp: loaded support on port[0] = 21
11:06:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x100000000000000}}, 0x24, 0x0)

[  795.678233] IPVS: ftp: loaded support on port[0] = 21
[  795.690710] IPVS: ftp: loaded support on port[0] = 21
11:06:44 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  795.876299] overlayfs: filesystem on './file0' not supported as upperdir
11:06:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x200000000000000}}, 0x24, 0x0)

[  796.163854] overlayfs: filesystem on './file0' not supported as upperdir
11:06:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000"], 0xc0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:06:45 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0xffffffff00000000}}, 0x24, 0x0)

[  796.385954] IPVS: ftp: loaded support on port[0] = 21
[  796.576836] overlayfs: filesystem on './file0' not supported as upperdir
[  796.587121] audit: type=1326 audit(1549451205.432:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17256 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:06:45 executing program 1:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:45 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x0, 0x2}}, 0x24, 0x0)

[  797.164666] overlayfs: filesystem on './file0' not supported as upperdir
[  797.482879] IPVS: ftp: loaded support on port[0] = 21
11:06:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f950000000000000000000000"], 0xc2)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:06:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x0, 0x1000000}}, 0x24, 0x0)

11:06:58 executing program 4:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:58 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:58 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:58 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  809.761939] overlayfs: filesystem on './file0' not supported as upperdir
11:06:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x0, 0x2000000}}, 0x24, 0x0)

[  809.870358] audit: type=1326 audit(1549451218.611:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17284 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  809.908679] IPVS: ftp: loaded support on port[0] = 21
[  809.951767] IPVS: ftp: loaded support on port[0] = 21
[  810.001632] IPVS: ftp: loaded support on port[0] = 21
[  810.022643] IPVS: ftp: loaded support on port[0] = 21
11:06:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x0, 0x100000000000000}}, 0x24, 0x0)

11:06:59 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f950000000000000000000000"], 0xc2)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:06:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x0, 0x200000000000000}}, 0x24, 0x0)

[  810.703196] overlayfs: filesystem on './file0' not supported as upperdir
[  810.791349] IPVS: ftp: loaded support on port[0] = 21
[  810.828890] audit: type=1326 audit(1549451219.553:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17324 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:06:59 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:06:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x0, 0xffffffff00000000}}, 0x24, 0x0)

[  811.071919] overlayfs: filesystem on './file0' not supported as upperdir
[  811.270031] IPVS: ftp: loaded support on port[0] = 21
[  811.321003] overlayfs: filesystem on './file0' not supported as upperdir
11:07:00 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x2}}, 0x24, 0x0)

11:07:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f950000000000000000000000"], 0xc2)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  811.714513] overlayfs: filesystem on './file0' not supported as upperdir
[  811.954758] audit: type=1326 audit(1549451220.674:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17347 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:07:12 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:12 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:12 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x4}}, 0x24, 0x0)

11:07:12 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:07:12 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  824.074747] overlayfs: filesystem on './file0' not supported as upperdir
[  824.162723] IPVS: ftp: loaded support on port[0] = 21
[  824.176591] IPVS: ftp: loaded support on port[0] = 21
11:07:12 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0)

[  824.200067] audit: type=1326 audit(1549451232.822:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17364 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  824.265592] IPVS: ftp: loaded support on port[0] = 21
[  824.402058] IPVS: ftp: loaded support on port[0] = 21
11:07:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x17}}, 0x24, 0x0)

[  824.479054] overlayfs: filesystem on './file0' not supported as upperdir
11:07:13 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  824.785905] overlayfs: filesystem on './file0' not supported as upperdir
11:07:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:07:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x7ffff}}, 0x24, 0x0)

[  824.906158] IPVS: ftp: loaded support on port[0] = 21
[  825.084396] audit: type=1326 audit(1549451233.695:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17400 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  825.224701] overlayfs: filesystem on './file0' not supported as upperdir
11:07:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0)

[  825.552115] overlayfs: filesystem on './file0' not supported as upperdir
11:07:26 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:26 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x1000000}}, 0x24, 0x0)

11:07:26 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:07:26 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  838.039607] overlayfs: filesystem on './file0' not supported as upperdir
[  838.051899] IPVS: ftp: loaded support on port[0] = 21
[  838.128499] audit: type=1326 audit(1549451246.617:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17423 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:07:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x2000000}}, 0x24, 0x0)

[  838.281753] IPVS: ftp: loaded support on port[0] = 21
[  838.308411] IPVS: ftp: loaded support on port[0] = 21
[  838.313287] IPVS: ftp: loaded support on port[0] = 21
11:07:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x100000000000000}}, 0x24, 0x0)

11:07:27 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  838.472148] overlayfs: filesystem on './file0' not supported as upperdir
[  838.785972] overlayfs: filesystem on './file0' not supported as upperdir
11:07:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  838.852099] IPVS: ftp: loaded support on port[0] = 21
11:07:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x200000000000000}}, 0x24, 0x0)

11:07:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0xffffffff00000000}}, 0x24, 0x0)

[  839.240804] overlayfs: filesystem on './file0' not supported as upperdir
[  839.328891] audit: type=1326 audit(1549451247.827:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17463 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  839.492057] overlayfs: filesystem on './file0' not supported as upperdir
11:07:42 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x0, 0x2}}, 0x24, 0x0)

11:07:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:07:42 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:42 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  854.322907] overlayfs: filesystem on './file0' not supported as upperdir
11:07:42 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x0, 0x1000000}}, 0x24, 0x0)

[  854.393962] audit: type=1326 audit(1549451262.762:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17476 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  854.723174] IPVS: ftp: loaded support on port[0] = 21
[  854.733383] overlayfs: filesystem on './file0' not supported as upperdir
[  854.733416] IPVS: ftp: loaded support on port[0] = 21
11:07:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x0, 0x2000000}}, 0x24, 0x0)

[  854.839183] IPVS: ftp: loaded support on port[0] = 21
[  854.861131] IPVS: ftp: loaded support on port[0] = 21
11:07:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x0, 0x100000000000000}}, 0x24, 0x0)

[  854.969729] overlayfs: filesystem on './file0' not supported as upperdir
11:07:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:07:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x0, 0x200000000000000}}, 0x24, 0x0)

[  855.275347] audit: type=1326 audit(1549451263.634:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17513 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  855.315054] overlayfs: filesystem on './file0' not supported as upperdir
11:07:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {0x10, 0x0, 0xffffffff00000000}}, 0x24, 0x0)

[  855.636447] overlayfs: filesystem on './file0' not supported as upperdir
[  855.873317] overlayfs: filesystem on './file0' not supported as upperdir
11:07:57 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:57 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x2}}, 0x24, 0x0)

11:07:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  869.384405] audit: type=1326 audit(1549451277.627:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17530 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  869.418130] overlayfs: filesystem on './file0' not supported as upperdir
[  869.773839] IPVS: ftp: loaded support on port[0] = 21
11:07:58 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x4}}, 0x24, 0x0)

11:07:58 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:07:58 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  870.552910] overlayfs: filesystem on './file0' not supported as upperdir
11:07:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x8}}, 0x24, 0x0)

11:07:58 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  870.723597] audit: type=1326 audit(1549451278.956:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17552 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  870.852093] IPVS: ftp: loaded support on port[0] = 21
[  870.863099] IPVS: ftp: loaded support on port[0] = 21
[  870.941193] IPVS: ftp: loaded support on port[0] = 21
[  870.995039] overlayfs: filesystem on './file0' not supported as upperdir
11:07:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x10}}, 0x24, 0x0)

[  871.080177] IPVS: ftp: loaded support on port[0] = 21
11:07:59 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:07:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:07:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x2}}, 0x24, 0x0)

[  871.391288] overlayfs: filesystem on './file0' not supported as upperdir
[  871.686217] IPVS: ftp: loaded support on port[0] = 21
[  871.747773] overlayfs: filesystem on './file0' not supported as upperdir
[  871.798262] audit: type=1326 audit(1549451280.007:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17588 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:08:00 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x1000000}}, 0x24, 0x0)

[  872.257051] overlayfs: filesystem on './file0' not supported as upperdir
11:08:15 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:15 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x2000000}}, 0x24, 0x0)

11:08:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:08:15 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:15 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  887.411416] overlayfs: filesystem on './file0' not supported as upperdir
11:08:15 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x100000000000000}}, 0x24, 0x0)

[  887.519485] audit: type=1326 audit(1549451295.597:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17607 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  887.522397] IPVS: ftp: loaded support on port[0] = 21
[  887.620059] IPVS: ftp: loaded support on port[0] = 21
[  887.691023] IPVS: ftp: loaded support on port[0] = 21
[  887.894870] overlayfs: filesystem on './file0' not supported as upperdir
11:08:16 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:16 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x200000000000000}}, 0x24, 0x0)

11:08:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:08:16 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  888.273253] IPVS: ftp: loaded support on port[0] = 21
[  888.339833] overlayfs: filesystem on './file0' not supported as upperdir
11:08:16 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0xffffffff00000000}}, 0x24, 0x0)

[  888.439748] audit: type=1326 audit(1549451296.519:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17642 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  888.589852] IPVS: ftp: loaded support on port[0] = 21
11:08:16 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x0, 0x2}}, 0x24, 0x0)

[  888.768030] overlayfs: filesystem on './file0' not supported as upperdir
[  889.042258] overlayfs: filesystem on './file0' not supported as upperdir
11:08:26 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:26 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x0, 0x1000000}}, 0x24, 0x0)

[  898.225200] overlayfs: filesystem on './file0' not supported as upperdir
[  898.366240] IPVS: ftp: loaded support on port[0] = 21
[  898.380674] IPVS: ftp: loaded support on port[0] = 21
11:08:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:08:26 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:26 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x0, 0x2000000}}, 0x24, 0x0)

[  898.849931] audit: type=1326 audit(1549451306.843:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17682 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  898.873949] overlayfs: filesystem on './file0' not supported as upperdir
11:08:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x0, 0x100000000000000}}, 0x24, 0x0)

[  899.019328] IPVS: ftp: loaded support on port[0] = 21
[  899.038317] IPVS: ftp: loaded support on port[0] = 21
11:08:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x0, 0x200000000000000}}, 0x24, 0x0)

[  899.257377] overlayfs: filesystem on './file0' not supported as upperdir
11:08:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  899.524949] overlayfs: filesystem on './file0' not supported as upperdir
11:08:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x0, 0xffffffff00000000}}, 0x24, 0x0)

[  899.738450] audit: type=1326 audit(1549451307.735:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17708 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:08:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x3, 0x0)

[  899.851839] overlayfs: filesystem on './file0' not supported as upperdir
[  900.223920] overlayfs: filesystem on './file0' not supported as upperdir
11:08:41 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:41 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:41 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x20000c64, 0x0)

11:08:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  914.158688] overlayfs: filesystem on './file0' not supported as upperdir
[  914.255415] audit: type=1326 audit(1549451322.125:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17723 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  914.361653] IPVS: ftp: loaded support on port[0] = 21
[  914.440130] IPVS: ftp: loaded support on port[0] = 21
11:08:42 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:42 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x2)

11:08:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  914.909676] overlayfs: filesystem on './file0' not supported as upperdir
11:08:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x1000000)

[  915.057396] IPVS: ftp: loaded support on port[0] = 21
[  915.088218] IPVS: ftp: loaded support on port[0] = 21
[  915.169087] audit: type=1326 audit(1549451323.027:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17754 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:08:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x2000000)

[  915.424753] overlayfs: filesystem on './file0' not supported as upperdir
11:08:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x100000000000000)

[  915.756102] overlayfs: filesystem on './file0' not supported as upperdir
11:08:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r5=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  916.079472] overlayfs: filesystem on './file0' not supported as upperdir
[  916.287196] audit: type=1326 audit(1549451324.138:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17771 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:08:57 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  929.877573] IPVS: ftp: loaded support on port[0] = 21
11:08:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r5=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:08:57 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x200000000000000)

11:08:57 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:57 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:08:57 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  930.200863] overlayfs: filesystem on './file0' not supported as upperdir
[  930.271602] audit: type=1326 audit(1549451338.012:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17787 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  930.317477] IPVS: ftp: loaded support on port[0] = 21
11:08:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0xffffffff00000000)

11:08:58 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  930.393879] IPVS: ftp: loaded support on port[0] = 21
[  930.450549] IPVS: ftp: loaded support on port[0] = 21
[  930.651375] overlayfs: filesystem on './file0' not supported as upperdir
11:08:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6638d265302c6c6f7765726b6469723d2e2f6645dee929696c65317a1d5ec915a6"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:08:58 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  930.826415] IPVS: ftp: loaded support on port[0] = 21
[  930.949398] overlayfs: unrecognized mount option "lowerkdir=./fEÞé)ile1z^ɦ" or missing value
11:08:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r5=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  931.012047] overlayfs: unrecognized mount option "lowerkdir=./fEÞé)ile1z^ɦ" or missing value
11:08:58 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8)
stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@fsmagic={'fsmagic', 0x3d, 0x200}}, {@uid_gt={'uid>', r3}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_access\x00'}}]}})

[  931.074992] IPVS: ftp: loaded support on port[0] = 21
[  931.259819] audit: type=1326 audit(1549451338.994:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17827 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  931.286013] overlayfs: filesystem on './file0' not supported as upperdir
11:08:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000940)='/dev/null\x00', 0x800, 0x0)
setns(r0, 0x8000000)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c653148e15b4b904f7bc9988e5132cc44e354abbeaa7ba5cb670abb95de9cbd72713deac53a024ed25c88fc2db6db30163563bced738ecc1a20e116acac77d1e49a6229146ac71a02a5f344abaeebaf1051a22d0981a3d955a0fe5f0a23cd314247dcbb93487281c4f6b6b7213f6dc9a2de0607630bdf211ea6b6814126005f548971c40a5e1d32efd92c96adcd5b1faea6d17e191f08c1ff6adefc9bc7c4ead2d87fd300a31a2fa64e274f27c066379e13410671b546c915aa809ede8b5e"])
lstat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = geteuid()
lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f00000005c0)='./file0\x00', &(0x7f00000008c0))
getgroups(0x1, &(0x7f0000000680)=[<r4=>0x0])
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x44002, &(0x7f00000006c0)={'trans=virtio,', {[{@posixacl='posixacl'}, {@posixacl='posixacl'}, {@access_user='access=user'}, {@access_uid={'access', 0x3d, r1}}, {@version_9p2000='version=9p2000'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@mmap='mmap'}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@msize={'msize', 0x3d, 0x6}}], [{@dont_appraise='dont_appraise'}, {@obj_type={'obj_type', 0x3d, '-ppp0{eth0eth1!cpuset:-\'.system+]lowlan0wlan1posix_acl_access'}}]}})
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x104)
fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="020000000100000000000000040000e60500000000001000000000000000200000000000000003dec728"], 0x24, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000340)=0x6, 0x4)
linkat(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file1\x00', 0x0)
stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240))
getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000800)={@dev, @multicast1}, &(0x7f0000000840)=0x8)

11:08:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000380)='./file0/file0\x00', 0x8000, 0x4)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r1})
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040))
sysfs$1(0x1, &(0x7f0000000280)='system.posix_acl_access\x00')
accept4$alg(r2, 0x0, 0x0, 0x800)

[  931.508167] overlayfs: failed to resolve './file1Há[K�O{ɘŽQ2ÌDãT«¾ª{¥Ëg
[  931.508167] »•Þœ½rq=êÅ:NÒˆü-¶Û05c¼ísŽÌ ᬬwÑäšb)jÇ¥óD«®ë¯Q¢-	�£ÙU þ_
[  931.508167] #Í1BGÜ»“Hr�Äö¶·!?mÉ¢Þcß!¦¶�A&': -2
[  931.533381] overlayfs: failed to resolve './file1Há[K�O{ɘŽQ2ÌDãT«¾ª{¥Ëg
[  931.533381] »•Þœ½rq=êÅ:NÒˆü-¶Û05c¼ísŽÌ ᬬwÑäšb)jÇ¥óD«®ë¯Q¢-	�£ÙU þ_
[  931.533381] #Í1BGÜ»“Hr�Äö¶·!?mÉ¢Þcß!¦¶�A&': -2
11:08:59 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  931.698806] overlayfs: filesystem on './file0' not supported as upperdir
[  931.869382] IPVS: ftp: loaded support on port[0] = 21
11:09:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:09:11 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0xc)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:09:11 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:11 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  944.240395] audit: type=1326 audit(1549451351.866:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17856 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  944.264243] overlayfs: filesystem on './file0' not supported as upperdir
[  944.307296] IPVS: ftp: loaded support on port[0] = 21
[  944.401908] IPVS: ftp: loaded support on port[0] = 21
11:09:12 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:12 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:12 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x101000)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x4)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x20)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:09:12 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:12 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  944.719590] overlayfs: failed to resolve './file1': -2
[  944.738463] overlayfs: failed to resolve './file1': -2
11:09:12 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a3d2e2f0300000031"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  944.845441] IPVS: ftp: loaded support on port[0] = 21
[  944.884032] IPVS: ftp: loaded support on port[0] = 21
11:09:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  944.988509] overlayfs: missing 'workdir'
[  944.998137] IPVS: ftp: loaded support on port[0] = 21
[  945.019047] IPVS: ftp: loaded support on port[0] = 21
[  945.026185] overlayfs: missing 'workdir'
11:09:12 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x8)

11:09:12 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  945.284751] audit: type=1326 audit(1549451352.897:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17902 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  945.313934] overlayfs: filesystem on './file0' not supported as upperdir
[  945.369254] IPVS: ftp: loaded support on port[0] = 21
11:09:13 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040))
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x3f, 0x4)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f7b6b6469723d2e2f66696c65319b552d6aa64936c234382dd99cbf75cab4ce73ea25baafdf472391d64909f3f90265b689522dadc792ac79ef5fdc1455002c5538ebae2f657ce809a62b45b20130b48ee4f43d7f41b3f0e1e393cbda4a183c95ac703968fde4a425f5a70f1f431aac8c7ffe155c52e52a41e352cd4f37e460cc214c4d87c3ca21b9adaecd9fecd6219a3ff08631e322f3fae03f7ab154bb"])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:09:13 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  945.655609] overlayfs: unrecognized mount option "wo{kdir=./file1›U-j¦I6Â48-Ùœ¿uÊ´Îsê%º¯ßG#‘ÖI	óùe¶‰R-­Ç’¬yï_ÜU" or missing value
[  945.678940] IPVS: ftp: loaded support on port[0] = 21
[  945.708371] overlayfs: unrecognized mount option "wo{kdir=./file1›U-j¦I6Â48-Ùœ¿uÊ´Îsê%º¯ßG#‘ÖI	óùe¶‰R-­Ç’¬yï_ÜU" or missing value
11:09:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@random={'security.', '\x00'})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80000)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x4)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x2100, 0x0)
mount$overlay(0x400000, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=@random={'user.', '/dev/vfio/vfio\x00'}, &(0x7f00000003c0)=""/13, 0xd)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x20001)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x443, 0x0)

[  946.006679] overlayfs: filesystem on './file0' not supported as upperdir
[  946.095915] IPVS: ftp: loaded support on port[0] = 21
11:09:21 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:21 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:21 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:21 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:09:21 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80000)
recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000400)=""/138, 0x8a}], 0x3, &(0x7f00000004c0)=""/132, 0x84}, 0x2002)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000004200000000000000000000000000000000000000000"], 0x24, 0x0)

[  954.290184] overlayfs: filesystem on './file0' not supported as upperdir
11:09:21 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7f, 0x408000)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="a469dacf8c1ab27533e814856f91452761f10205b7af5dcce698c999b74feef209684b5e63998cc3b9b7e982e33ab11c7360d1eeef13ded0d6dee6dd8857080504567f20112210f5a1ab6c350f49f09a3de147da039c68cfe7"]])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  954.354014] IPVS: ftp: loaded support on port[0] = 21
[  954.367758] IPVS: ftp: loaded support on port[0] = 21
[  954.370462] audit: type=1326 audit(1549451361.912:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17949 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  954.380847] IPVS: ftp: loaded support on port[0] = 21
[  954.557429] overlayfs: unrecognized mount option "@
" or missing value
[  954.575749] overlayfs: unrecognized mount option "@
" or missing value
11:09:22 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./nile1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={<r1=>0x0, 0xa03}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x84)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000f0000000004000000c46bf31c261d82590000000010000000000000002000000000000000"], 0x24, 0x0)

11:09:22 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  954.626899] IPVS: ftp: loaded support on port[0] = 21
[  954.789343] overlayfs: failed to resolve './nile1': -2
[  954.819265] overlayfs: failed to resolve './nile1': -2
11:09:22 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:22 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
write$capi20_data(r0, &(0x7f0000000340)={{0x10, 0x4, 0x5, 0x83, 0x400, 0x5}, 0x93, "83d63d2696b95bc147474430f31806910fb818305ebcbbb41fe787407a82053bed81034062acd8964268d8977288c15c0d1190b4c2ce6a73f8b1a4d59d807b9678e802650cb17a7df848cb45735c772f3f562b56484d2e92ee5a7ca4ebdffd23a81ce22ee538f19578ea90e31c06a5dc774ac3cbad669d0c2c5b100b121e0bb8fff259e21d233e7edc405cbe3e05f7ed5065a9"}, 0xa5)

[  954.840705] IPVS: ftp: loaded support on port[0] = 21
11:09:22 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:22 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  955.037729] overlayfs: filesystem on './file0' not supported as upperdir
11:09:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  955.104300] IPVS: ftp: loaded support on port[0] = 21
[  955.152609] IPVS: ftp: loaded support on port[0] = 21
[  955.346891] audit: type=1326 audit(1549451362.874:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18000 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  955.430356] overlayfs: filesystem on './file0' not supported as upperdir
11:09:31 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:31 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:31 executing program 0:
mkdir(&(0x7f0000000200)='\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:09:31 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:31 executing program 5:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  964.147306] overlayfs: failed to resolve './file1': -2
[  964.166667] overlayfs: failed to resolve './file1': -2
11:09:31 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x3fffc)
mount$overlay(0x400000, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[])
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8000, 0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x50000009)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000006200000000000000061b67f87165d3f549c6be88395d46b58347dd51c75ebf9fc50d2e79373fcac93707225f08fb1abd141eafc10a4a3eb4033c6071339bb44be5c0946493f03a4814a2670335358e00870e23d2c32c9f39865e20bc6fc22e089953074203b0c91091d4c8bf6c02a5a31d104d934906390"], 0x24, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000400)={"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"})
rename(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)='./file1\x00')

[  964.248622] IPVS: ftp: loaded support on port[0] = 21
[  964.280949] IPVS: ftp: loaded support on port[0] = 21
[  964.292504] audit: type=1326 audit(1549451371.750:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18021 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  964.314064] IPVS: ftp: loaded support on port[0] = 21
[  964.450005] overlayfs: missing 'lowerdir'
[  964.479809] overlayfs: missing 'lowerdir'
[  964.482782] IPVS: ftp: loaded support on port[0] = 21
11:09:32 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x22)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x400, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000004c0)=0x8, 0x4)
setrlimit(0x0, &(0x7f0000000040)={0x40, 0x2})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000180)={0x18000000000000, &(0x7f0000000240)="f9d1f0751f9301b839b4d85e50509ab30f86052626867988ebb83c868fd639932d6759dbd2c86e17079e89ea1b1615a3a1e97690f6ccac467d5e401eccab6e63aafdc2ccf4a2296c404c20cafde18032f6656578c8830e2903342cb598d1268a2883daaf9489db0c92d024440f2058ce1bc6d394b68866c79e71ee"})
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"])
r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x101000)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000340)={0x0, @reserved})
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
seccomp(0x1, 0x0, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x8, 0x400, 0x5, 0x100}, {0xffffffffffffffff, 0x1, 0x9, 0x9}, {0x10000, 0x1f, 0x9, 0xfffffffffffffffe}, {0x1, 0x287, 0xffffffff, 0x7fff}]})
fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r4}], {0x4, 0xffffffffffffffff}, [], {0x10, 0x1}}, 0x3d, 0x0)

11:09:32 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:32 executing program 5:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  964.674340] kcapi: manufacturer command 6755399441055744 unknown.
[  964.704382] overlayfs: unrecognized mount option "uile0" or missing value
11:09:32 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  964.754312] kcapi: manufacturer command 6755399441055744 unknown.
[  964.765055] overlayfs: unrecognized mount option "uile0" or missing value
11:09:32 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x1)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c696c6531b3e63e917cff35cabdeaa4546f1707f0a0bb8912fc7f0523821f685627db9e915ed05fad6450eea882bd4dc2eea9d86357ca667f00e4dd73324fec2ff6102db2960ed5ad19791293d93a348501558719ea732c2a27536b27e182c54234d9223e5da0d43c403822b0c98e01a1932cec11af37c7a84a1c594590acad0bb1c963067c6834740000000000000000000000"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x880, 0x2)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010000000000000004040000000000001000db000000000000200000001016341905be176bd32877e10f75b71b6854456c72e38dbdbc9094cf29d42c877cbe529b5b10"], 0x24, 0x0)

[  964.964713] IPVS: ftp: loaded support on port[0] = 21
[  964.985187] IPVS: ftp: loaded support on port[0] = 21
[  965.071073] IPVS: ftp: loaded support on port[0] = 21
[  965.080056] overlayfs: unrecognized mount option "ile1³æ>‘|ÿ5ʽê¤To𠻉ü#‚hV'Ûž‘^Ð_­dP½MÂî©ØcWÊf" or missing value
[  965.142455] overlayfs: unrecognized mount option "ile1³æ>‘|ÿ5ʽê¤To𠻉ü#‚hV'Ûž‘^Ð_­dP½MÂî©ØcWÊf" or missing value
11:09:40 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f4cf7a96201df62d4b722f444fa66696c65302c6c6f7765726469723d2e3a66696c65302c776f"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000000000002cb68c8a67b674e93cc23677c7f79a1acbc2fd12ecd16e1d35c501b4fac80f64b7ac3a009e90dcd68197a40985dccf7db5eaedf35e1f4a1110720fa9cf9bf8681a35102c4b67212a7dbc7572d50c2b3ed12cff991784f51c61148016fecc69f8d5503579dba8c9"], 0x24, 0x0)

11:09:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:09:40 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:40 executing program 5:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:40 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:40 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  973.636571] overlayfs: unrecognized mount option "wo" or missing value
[  973.674123] IPVS: ftp: loaded support on port[0] = 21
[  973.690938] overlayfs: unrecognized mount option "wo" or missing value
[  973.703303] IPVS: ftp: loaded support on port[0] = 21
[  973.710571] audit: type=1326 audit(1549451381.091:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18084 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  973.725486] IPVS: ftp: loaded support on port[0] = 21
11:09:41 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400100, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x222, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x400}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvfrom(r0, &(0x7f0000000280)=""/63, 0x3f, 0x40000141, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, [], 0x1a}, 0x7f}}}, 0x80)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d0e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c6531"])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  973.835115] IPVS: ftp: loaded support on port[0] = 21
11:09:41 executing program 5:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  974.002293] overlayfs: failed to resolve '/file0': -2
[  974.037606] overlayfs: failed to resolve '/file0': -2
11:09:41 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x602000)
fchdir(r0)
name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000c80)={0x1008, 0x6, "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"}, &(0x7f0000000140), 0x1000)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:09:41 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:41 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  974.291472] overlayfs: filesystem on './file0' not supported as upperdir
11:09:41 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2)
unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c653148c1d5a7a2063662083cd5803b2323f3e5c0380eca14f720e65028626d4d99f62119d9b593afd0748d53fe7a7099f875bdcec73eac56420800bcebed"])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  974.360034] IPVS: ftp: loaded support on port[0] = 21
11:09:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x0, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  974.427655] IPVS: ftp: loaded support on port[0] = 21
[  974.665501] IPVS: ftp: loaded support on port[0] = 21
11:09:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x8001, 0xffffffff})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  974.715561] audit: type=1326 audit(1549451382.083:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18133 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  974.737951] overlayfs: failed to resolve './file1HÁÕ§¢6b<Õ€;##óåÀ8Ê÷ æP(bmM™ö!Ùµ“¯Ðt�Sþzp™øu½ÎÇ>¬VB': -2
[  974.751193] overlayfs: failed to resolve './file1HÁÕ§¢6b<Õ€;##óåÀ8Ê÷ æP(bmM™ö!Ùµ“¯Ðt�Sþzp™øu½ÎÇ>¬VB': -2
[  975.020077] overlayfs: filesystem on './file0' not supported as upperdir
11:09:51 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:51 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
timerfd_create(0x9, 0x80800)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:09:51 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x0, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:09:51 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  984.706375] IPVS: ftp: loaded support on port[0] = 21
[  984.766978] audit: type=1326 audit(1549451392.050:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18151 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  984.873082] IPVS: ftp: loaded support on port[0] = 21
[  985.017722] IPVS: ftp: loaded support on port[0] = 21
11:09:53 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0xdb}, 0xf)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x1000001000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
close(r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = inotify_init()
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:09:53 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:53 executing program 5:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:09:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x0, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:09:53 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
chmod(&(0x7f0000000040)='./file1\x00', 0x40)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000460d0929792940834bbfe4cb5fc198e7b291f2fc97b69c9123c78376613067f966d66cb8a1d8359d1bc10bc389fab0ec8d0bff26142915537f8ad6c4da1a3c9aa12792ab67e2b8c990996fdf0a4221a8b095439793f7939da0a84ac59b9838dd9ed5a397603fc7c9bc9ddca4e21b4da783ea9223"], 0x24, 0x0)

[  986.527800] audit: type=1326 audit(1549451393.805:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18175 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[  986.675279] overlayfs: filesystem on './file0' not supported as upperdir
[  986.697974] IPVS: ftp: loaded support on port[0] = 21
[  986.730564] IPVS: ftp: loaded support on port[0] = 21
11:09:54 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)=@in={0x2, 0x4e20, @rand_addr=0x713}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="313e15eb3ed275b42a81036b7fcec06bdf8ffc1e3527fd5f142634e8b5eb2f45929176afff759feb4289c4fda8bd92cbe09251ba3563c17b809e", 0x3a}, {&(0x7f0000000240)="aae614108ffeb196eb245b595523bb0029f9932675dd83287d81119e545d6d364df59f72f16f81c03411dd2500753353b32141a203d770883836c0f4e760ed6a326decb6da251a0ae7cfb0fd1860815c941fd0edce1290aeaccd96a2dcfdb9ec19c173c5d2e2240b69bd0d9219925e7d3f994582393d46cb7f05a0f8937f5876", 0x80}, {&(0x7f0000000340)="f23ccd36256509e2b4f45d0abc463c7ce84a0e654928526a355141e5bc2421e444ad34748d3c485e8f89c2bedd52e30490b7dcdffd314ce0977a0fdbe425bd556e7e7aa1a1cc431696069cf6e570ff740ffb0b380e32b736ec0436971b4f434dbfde0a6db82d9dbb2ddb65e03ef8daa8027e7f73cdbe67adb65781e4e4f8e6f4392e2b47dc4f4b4f5e661eca54251c38feff788bc3ef161ee52738b439355dc658e9875e8088d04babd62e14349d506905de1607496a9ed9715d84c5edbb3fcc3b93f1032805a40bb3d139", 0xcb}, {&(0x7f0000000180)="100b6fc8cfb5825810da1e123ae4b6716c92f7d6c4a8a9c7d9", 0x19}], 0x4, &(0x7f0000000480)=[{0xa0, 0x0, 0x4, "f774c04e031a9b420c87bdc3e40567049d076467b731eb8f170f12d2ef9276b22f668d5f70b920adfee3f1e3573ef40e975ff914df763478560ed277a06e1b710e8fc9d7ea85213429a1961c749eff97e7211fd9fc76da11a3d278c35dfdb8441639d9aae2eb399dfd35ac3abb11eca0ee535cd93a217f27ceffa29068bfa969702038acc1533b85fc52b73eceef416a"}, {0x78, 0x10d, 0xffffffffffffa8b4, "3e5425423010aa494d152cc18c604e7613ebb65e38a4419fe892b883f9a03c555408bc867ee8e571dfbee30063e2e3fa7b8e157ce856e062365a2c8380871f5e8c4e2667e98025a95843b944132e209a6d7966a1a6b3693041cd3a0eb0049307d55a"}, {0xa8, 0x10d, 0x3, "224ab3322b512c859e730490ce96c0a8ff66e8dcd78dd53e255b9e91d8fa497dfe88c9b890bc16363d5c8919a2099302c2d0265085bd442c90b6bc73ed646fd0463d73503f7c774cd769031780b1693adc9eaddc46636727bfd190f63387e59f44b599cbef697c43bc5fd648445a43712923061f51e916a6c60f8c6264e4f32086d416f31df7ad69963c4a15f9634f36bccf86cb21"}], 0x1c0}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="ab08a021dde0f6f28546a6b0e643fa9dc0007049824cfae9156f9145d67fad08c647601b5fc1c1ea233916c0d7c0fddbdb0be4627aef5cd4e4960d38e31b3f246a75c14e8ad32a75b239df8cc82398df614c2c2013f93d56b7c4989069f5076f6c765d7c8f33db74f676844ecf67668a9eff2729c93975bcca5e0fd08856bc52ff753af9d9e0ff92794ad82dd72c06135a886d50996e121526105c6fc3fe587bff95baa7eaf92e851d7a857b73748de7489209e7", 0xb4}], 0x1}, 0x100}, {{&(0x7f0000000740)=@nfc_llcp={0x27, 0x0, 0x2, 0x7, 0x1, 0x651, "863c4404b973b76bc1f5ef8702adc085531b5e7f3f9bfa6baa5bce1eb34286132de1e13967bbb47709065865f319d09c6732e04ee379a6d87c115ce970a056", 0xd}, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)="0984d0e2f997e5", 0x7}], 0x1, &(0x7f0000000840)}, 0x1}], 0x3, 0x4)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  987.059906] overlayfs: filesystem on './file0' not supported as upperdir
11:09:54 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x90000, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[  987.446104] overlayfs: filesystem on './file0' not supported as upperdir
11:10:06 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000004000000002ab40000001000000000000000200000000000"], 0x24, 0x0)
r1 = getpgid(0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1})

11:10:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:10:06 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:06 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:06 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[  999.896702] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1000.004240] audit: type=1326 audit(1549451407.163:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18214 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:10:07 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x100000000000000)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000200)="692843fda834452f0479f998ee5633de31a9d5d60a583814811a6946e4bdd715c14c5af82ca2d147cf6f5d8dfb3e7b24a8", &(0x7f0000000340)=""/208}, 0x18)
r1 = getegid()
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00')
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r1}, {0x8, 0x5, r1}], {}, {0x20, 0x1}}, 0xf1, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={<r2=>0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f0000000280)='-GPL\xe9cgroup\x00'}, 0x30)
process_vm_readv(r2, &(0x7f0000000840)=[{&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f0000000780)=""/155, 0x9b}], 0x5, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/249, 0xf9}, {&(0x7f00000009c0)=""/6, 0x6}], 0x2, 0x0)

[ 1000.112915] IPVS: ftp: loaded support on port[0] = 21
[ 1000.172422] IPVS: ftp: loaded support on port[0] = 21
[ 1000.211881] IPVS: ftp: loaded support on port[0] = 21
11:10:07 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"])

[ 1000.605330] overlayfs: filesystem on './file0' not supported as upperdir
11:10:08 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:10:08 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x9)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:10:08 executing program 5:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:08 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1001.237784] overlayfs: filesystem on './file0' not supported as upperdir
11:10:08 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x80)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x401)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1001.310289] audit: type=1326 audit(1549451408.452:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18247 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1001.395443] IPVS: ftp: loaded support on port[0] = 21
[ 1001.529703] IPVS: ftp: loaded support on port[0] = 21
[ 1001.690350] overlayfs: filesystem on './file0' not supported as upperdir
11:10:08 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x7ff, 0x4)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:10:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1002.058443] overlayfs: filesystem on './file0' not supported as upperdir
11:10:09 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0xfc, 0x3, 0x8008, 0xda92, 0x5, 0x5, 0x1ff, 0x9, <r1=>0x0}, &(0x7f0000000140)=0x20)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1002.337251] audit: type=1326 audit(1549451409.474:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18271 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1002.599031] overlayfs: filesystem on './file0' not supported as upperdir
11:10:22 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:22 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7)

11:10:22 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:10:22 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:22 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1016.106953] overlayfs: filesystem on './file0' not supported as upperdir
[ 1016.151617] audit: type=1326 audit(1549451423.169:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18284 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1016.208845] IPVS: ftp: loaded support on port[0] = 21
11:10:23 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, <r0=>0x0})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400, 0x0)
mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x1122, 0x5)
perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x5000000000, 0x101, 0x9, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x3a4000000, 0x1f, 0x80000001, 0x8, 0x1, 0x3, 0xcd, 0x6, 0x548, 0xfffffffffffffff7, 0x2, 0x1, 0x2, 0x6, 0x0, 0x3, 0x7, 0x3, 0xaeb1, 0x1, 0x5, 0xd3, 0x2, 0x9, 0x2, 0x1, 0x24000000000000, 0x6, 0x0, 0x5, 0x5449f293771b0eef, @perf_bp={&(0x7f0000000340)}, 0x10, 0x7, 0x1, 0x2, 0x2, 0x29, 0xa5}, r0, 0x9, r1, 0x2)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x248})
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
epoll_create(0xc585)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000004c0)=0x5)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000100000000100000040000000000000010000000000000002000000000800000"], 0x24, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x4)
bind$alg(r2, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x2)

[ 1016.334740] IPVS: ftp: loaded support on port[0] = 21
[ 1016.387253] IPVS: ftp: loaded support on port[0] = 21
[ 1016.592788] overlayfs: filesystem on './file0' not supported as upperdir
11:10:24 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:24 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r0=>0xffffffffffffff9c})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x200, <r1=>0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x4a, r1})
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001f873368f505b84a400000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)

11:10:24 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1017.261574] overlayfs: filesystem on './file0' not supported as upperdir
11:10:24 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000047b6c067a511eef208cfdd7098697951831e2364ee170832b11a2e090af6b36352267d4b7d6e92cea8aac50e08bd07a39b9ce8fb2909b6d4df9426fd6e091685ad65a38f70a247e689c8f8cdc04a5d14bc5480f8894f25c666a5cec2ad"], 0x24, 0x0)

[ 1017.295016] audit: type=1326 audit(1549451424.310:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18316 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1017.460408] IPVS: ftp: loaded support on port[0] = 21
[ 1017.577970] IPVS: ftp: loaded support on port[0] = 21
11:10:24 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = dup(r0)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000500)=""/203)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='affs\x00', 0x200080, &(0x7f0000000240)='system.posix_acl_access\x00')
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000080)=""/41)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000f8ffffffffff1f00000000000000"], 0x24, 0x0)

[ 1017.613199] overlayfs: filesystem on './file0' not supported as upperdir
[ 1018.015158] overlayfs: filesystem on './file0' not supported as upperdir
11:10:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:10:39 executing program 2:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:39 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x5)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:10:39 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:39 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x80)
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x176)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000240)=0x4)
write$P9_RLERROR(r1, &(0x7f0000000280)={0x15, 0x7, 0x2, {0xc, 'cgroup.type\x00'}}, 0x15)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x1)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000000000000a26408000000000000002000100000000000000000000000"], 0x24, 0x0)

[ 1032.698575] audit: type=1326 audit(1549451439.582:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18346 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:10:39 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0xc0000, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
r3 = getpid()
kcmp(r2, r3, 0x6, r0, r0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x6, 0x80000000, 0x6, 0x8}, 0x10)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1032.876237] IPVS: ftp: loaded support on port[0] = 21
[ 1032.913814] IPVS: ftp: loaded support on port[0] = 21
[ 1033.108902] overlayfs: filesystem on './file0' not supported as upperdir
11:10:40 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:10:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:10:40 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:40 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1033.971771] overlayfs: filesystem on './file0' not supported as upperdir
11:10:40 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1034.070503] audit: type=1326 audit(1549451440.940:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18375 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1034.103726] IPVS: ftp: loaded support on port[0] = 21
[ 1034.189171] IPVS: ftp: loaded support on port[0] = 21
[ 1034.346083] overlayfs: filesystem on './file0' not supported as upperdir
11:10:41 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x20, @local, 0x4}, @in6={0xa, 0x4e21, 0x3, @local, 0x4c8}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e24, 0xb1e, @rand_addr="17718d88d8d9f1ba3970017925e32b34", 0x604e}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @rand_addr=0x80000001}, @in6={0xa, 0x4e22, 0x101, @loopback, 0x100000001}], 0xa0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000009f000000000000001000d9c89ba2160000000000002000000000000000000000"], 0x24, 0x0)

11:10:41 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1034.631791] overlayfs: filesystem on './file0' not supported as upperdir
[ 1035.104335] IPVS: ftp: loaded support on port[0] = 21
11:10:55 executing program 2:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:55 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0xf4a, 0x8000, 0x4, 0x100, 0x2, 0xd9a, 0x20, 0x4, 0x3, 0x80}, 0xb)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

11:10:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:10:55 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1048.670989] audit: type=1326 audit(1549451455.419:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18410 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:10:55 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = socket$bt_bnep(0x1f, 0x3, 0x4)
fcntl$getflags(r0, 0x40b)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000340)={'mangle\x00', 0x5d, "e56dc689dba80ba1b7470a0b9b4b92bc747b32b77a3af6257db7eebd05e4387a5e455c0c580de140c601e14df41404cd30a8e0684b0a5ee51a7a5f05b1d9c3ce2be9db375ae07d0933378a34dc28b11b8a2064795a069930bc02963db2"}, &(0x7f0000000040)=0x81)
r2 = shmget$private(0x0, 0x1000, 0x10c, &(0x7f0000ffc000/0x1000)=nil)
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080))
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1048.831112] IPVS: ftp: loaded support on port[0] = 21
[ 1048.961199] IPVS: ftp: loaded support on port[0] = 21
[ 1049.045925] overlayfs: filesystem on './file0' not supported as upperdir
11:10:55 executing program 2:
r0 = userfaultfd(0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:55 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x101)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:10:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1049.658027] IPVS: ftp: loaded support on port[0] = 21
[ 1049.769160] audit: type=1326 audit(1549451456.510:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18439 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:10:56 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:56 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8202, 0x22)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8)
getresgid(&(0x7f0000000280), &(0x7f0000000640), &(0x7f0000000680)=<r4=>0x0)
r5 = getegid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000700)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000780)=0xc)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x6}, [{0x2, 0x2, r1}, {0x2, 0x2, r2}, {0x2, 0x4, r3}], {}, [{0x8, 0x5, r4}, {0x8, 0x6, r5}, {0x8, 0x4, r6}, {0x8, 0x0, r7}], {}, {0x20, 0x2}}, 0x5c, 0x2)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r8, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000800000000000000000400a4ed0000000010000000090000002000000000000000"], 0x24, 0x0)

11:10:56 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:10:57 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
getresgid(&(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0)
chown(&(0x7f0000000040)='./file2\x00', r1, r2)

[ 1050.374056] IPVS: ftp: loaded support on port[0] = 21
11:10:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1050.615817] IPVS: ftp: loaded support on port[0] = 21
[ 1050.645725] overlayfs: filesystem on './file0' not supported as upperdir
11:10:57 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="35707065726469723d2e2f66696c65302c6c6f7765726469723d2ee2bdb2bc3ebd3ec66f726b6469723d2e2f66696c6531"])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x100, 0x8, 0xffffffffffffffc0, 0x4, 0x92b, 0x8})

[ 1050.777903] audit: type=1326 audit(1549451457.512:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18463 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1051.070257] overlayfs: unrecognized mount option "5pperdir=./file0" or missing value
[ 1051.092729] overlayfs: unrecognized mount option "5pperdir=./file0" or missing value
11:10:57 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)='overlay\x00', 0x800020, &(0x7f0000000080)=ANY=[])
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200000, 0x0)
r1 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x800)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='bpf\x00', 0x20004, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x800}}], [{@obj_type={'obj_type', 0x3d, 'system.posix_acl_access\x00'}}]})
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000100000000000000000000000000050000000000000020000000000000"], 0x24, 0x0)

11:11:11 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:11 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x2)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:11:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:11:11 executing program 2:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1065.151911] overlayfs: filesystem on './file0' not supported as upperdir
11:11:11 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x7fffffff, 0x1f, 0x7, 0x1})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1065.379952] IPVS: ftp: loaded support on port[0] = 21
[ 1065.385603] audit: type=1326 audit(1549451471.981:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18480 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1065.536918] IPVS: ftp: loaded support on port[0] = 21
[ 1065.588766] overlayfs: filesystem on './file0' not supported as upperdir
11:11:12 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:12 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0])
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80800)
ioctl(0xffffffffffffffff, 0xfffffffffffffffd, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
symlink(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='./file1/file0\x00')
setxattr$security_smack_entry(&(0x7f0000000480)='./file1\x00', &(0x7f00000001c0)='security.SMACK64MMAP\x00', &(0x7f0000000440)='\x00', 0x1, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000052e583a0790e8428bcfab3b019d4df000000000000000000c1716843e2ef724bd8f63dbf64bc38bc1dbd19ebaa63926ab57037ddd8531723d9ba32a52c"], 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x1, 0x5}, &(0x7f0000000580)=0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000480)={0x0, r0, 0x7e2d})
write$P9_RSYMLINK(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xb}}, 0x20)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x18010, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000740)={&(0x7f0000000380), 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2c, r3, 0xc00, 0x0, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
lchown(&(0x7f0000000000)='./file0/file1/file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:11:12 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1066.313703] overlayfs: missing 'lowerdir'
[ 1066.363144] audit: type=1800 audit(1549451472.972:328): pid=18510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16690 res=0
[ 1066.473394] audit: type=1804 audit(1549451473.042:329): pid=18510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir065076762/syzkaller.qoGK8O/504/bus" dev="sda1" ino=16690 res=1
[ 1066.610063] IPVS: ftp: loaded support on port[0] = 21
[ 1066.618660] overlayfs: missing 'lowerdir'
[ 1066.627138] audit: type=1326 audit(1549451473.191:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18505 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1066.672807] overlayfs: filesystem on './file0' not supported as upperdir
[ 1066.696014] IPVS: ftp: loaded support on port[0] = 21
[ 1066.715782] audit: type=1804 audit(1549451473.260:331): pid=18510 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir065076762/syzkaller.qoGK8O/504/bus" dev="sda1" ino=16690 res=1
[ 1066.740122] audit: type=1804 audit(1549451473.260:332): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir065076762/syzkaller.qoGK8O/504/bus" dev="sda1" ino=16690 res=1
11:11:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2(&(0x7f0000000040), 0x80000)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:11:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1067.234438] overlayfs: filesystem on './file0' not supported as upperdir
11:11:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765729ac615503f9b72adaa2539f76469723d2e3a66696c65302c776f726b6469723d2e2f66696c6531"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
read$alg(r0, &(0x7f0000000240)=""/164, 0xa4)

[ 1067.477514] audit: type=1326 audit(1549451474.073:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18529 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1067.565109] overlayfs: unrecognized mount option "loweršÆP?›r­ª%9÷dir=.:file0" or missing value
[ 1067.634150] overlayfs: unrecognized mount option "loweršÆP?›r­ª%9÷dir=.:file0" or missing value
11:11:27 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0]}, &(0x7f0000000080)=0x1c)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x3f6, 0x4, [0xffffffff, 0x3, 0x6e85, 0x1]}, 0x10)

11:11:27 executing program 2:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1081.011731] overlayfs: filesystem on './file0' not supported as upperdir
11:11:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707060e3a1f045f045a5e564b7daadfff26469723d2e2f66696c6530723d6e3a4669776f726b6469723d2e2f66690000"])
r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x100)
msgget(0x0, 0x1)
syz_extract_tcp_res$synack(&(0x7f00000005c0), 0x1, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]})
r1 = dup(0xffffffffffffff9c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x10000, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000004c0))
renameat(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000180)='./file1\x00')
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x9)
fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000380)=""/226, &(0x7f0000000480)=0xe2)
ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000340)={0x3, @null, r3})
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="820000000100000000010000040000000000000010000000000000002000000000000000"], 0x24, 0x0)

[ 1081.090270] audit: type=1326 audit(1549451487.570:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18543 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:11:27 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1081.251097] overlayfs: unrecognized mount option "upp`ã¡ðEðE¥åd·Ú­ÿòdir=./file0r=n:Fiworkdir=./fi" or missing value
11:11:27 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1081.320566] IPVS: ftp: loaded support on port[0] = 21
[ 1081.329195] IPVS: ftp: loaded support on port[0] = 21
[ 1081.338504] overlayfs: unrecognized mount option "upp`ã¡ðEðE¥åd·Ú­ÿòdir=./file0r=n:Fiworkdir=./fi" or missing value
11:11:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x9, &(0x7f0000000140)=[{0xffffffffffff7fff, 0x5, 0x8, 0xffff}, {0x1ff, 0x3, 0x5, 0x5}, {0x100000000000, 0x7, 0x3ff, 0x6}, {0x8, 0x8, 0x7, 0xfff}, {0x9, 0x4, 0x6, 0x3ff}, {0x40, 0x1, 0xffffffffffff8001, 0x2}, {0xae4, 0x400, 0x4, 0x7}, {0xfff, 0x4, 0x3, 0xee08}, {0x86, 0x61ec, 0x101, 0x7205}]})

[ 1081.508670] IPVS: ftp: loaded support on port[0] = 21
[ 1081.668281] overlayfs: filesystem on './file0' not supported as upperdir
11:11:28 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20040, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x401)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:11:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1081.813669] IPVS: ftp: loaded support on port[0] = 21
[ 1082.059695] audit: type=1326 audit(1549451488.532:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18578 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:11:28 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:28 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000340)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES64, @ANYRESDEC])
r0 = syz_open_pts(0xffffffffffffff9c, 0x200)
pwrite64(r0, &(0x7f0000000c80)="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", 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1082.195975] overlayfs: filesystem on './file0' not supported as upperdir
[ 1082.613289] overlayfs: unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615" or missing value
[ 1082.624812] IPVS: ftp: loaded support on port[0] = 21
11:11:43 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40000, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={<r1=>0x0}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={r1, 0xe9, "10533b744f4bde4c9476736fea3b4341c0aef47fc6386da2284dfd2ca8ce6d14ea1fea8e77730fd5cc16299abb8df894efee7d7dc7700c644713b861d532fb111c6b3340cae4bfd2d844ce5afa7a3c12902b4317a0f7431367201a351d5b5664c148348968e5a7689be692a4ced69e39bc04113abea5dc35581989bf232db906471560202f0e32884c0054d020af5453922b91067e4a9b03953c268a0f74c90a42100c00a6397c861c8a190b6fd636446e24a4dadd4e93ab8d2cf4bd568caeb1c3c2c9b650d9aaf6b056fcf550f271fe13613ecf12ab39c2f2211b7686572405eab040eff3a63b1199"}, &(0x7f0000000180)=0xf1)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240))

11:11:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:11:43 executing program 2:
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r0 = userfaultfd(0x0)
close(r0)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:43 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1097.369909] overlayfs: filesystem on './file0' not supported as upperdir
[ 1097.446735] audit: type=1326 audit(1549451503.804:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18600 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1097.473558] IPVS: ftp: loaded support on port[0] = 21
11:11:43 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x41)

11:11:43 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1097.611873] IPVS: ftp: loaded support on port[0] = 21
[ 1097.667144] IPVS: ftp: loaded support on port[0] = 21
11:11:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2040, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000400)={'mangle\x00', 0xd8, "731952c84b3bcc00a0a337523ab9b1f56566d31e7b6d9fe941e781d3fd4b805862b8babc892c2cb2a6bbbd4b6e206e2707bb974a3698348f72e87ff6a41e1fcffe92a9232a7aca495afaa94c953b04646cda491c3007a3cbfc14f38c5e9aa6efc6b0b633b2d0504347f1f64444ee9a331ba33966195036697f8a43a6bde5da3bb50466fac87b504be9d887b1c483ffa59356f3dbf57f7c1f740a52308ed5c423438cfbe617089c979ab12774309ca584d2d99cd51483dccd7b98775159838cba2f48c3a103846276019c6c617aaef36c9a3b250975301d5f"}, &(0x7f0000000180)=0xfc)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xae, 0x2, 0xfffffffffffffffb, "94132a9807b417cc805a16283540b992", "ef7725928d42d48c3c17866b725cb0959c8a3b67e7d383bcccd4810c0800acda842724722dabad0d1b815e9ad850d0ef1ccb75ee87b9a68335bf3ecb23ccee10b616d82b6ae91a350bbca87cfd92c3a7b80f4b31015835c452cb572cfaf48a14598ec1fcded16f74ad60635af5031eca71fbbf5bbb5c1cc7906ff89d8bdc7536678901676398fac445ef9347024e07574c9fae92fa1889b730"}, 0xae, 0x3)

[ 1097.943812] IPVS: ftp: loaded support on port[0] = 21
11:11:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:11:44 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c57302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c653161c5e4ab12425feeb17ee025d1ba88de0b61ae4b69dc4e5cd62b9252139cd22b5084c6b1897d4df6a05cf7c9f9f45df9"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1098.251910] overlayfs: filesystem on './file0' not supported as upperdir
[ 1098.340384] audit: type=1326 audit(1549451504.667:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18637 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:11:45 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="757070657264691a3d2e2f66696c65302c6c6f7765726469723d2e3a668a6c65302c776f726b6469723d2e2f66696c6531"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x48800)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1098.673654] overlayfs: failed to resolve './filW0': -2
[ 1098.689110] overlayfs: failed to resolve './filW0': -2
[ 1099.013048] overlayfs: unrecognized mount option "upperdi=./file0" or missing value
11:11:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={<r6=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[ 1099.470969] audit: type=1326 audit(1549451505.798:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18651 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
11:11:58 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:58 executing program 0:
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726c6f7765726469722199c867313d2e3a66696c65302c07000000000000002e2f66696c6531"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
finit_module(r0, &(0x7f0000000040), 0x1)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000100000000000002040000000000000010000000000000002000000000000000"], 0x24, 0x0)

11:11:58 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={<r5=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

[ 1112.287589] overlayfs: unrecognized mount option "upperlowerdir!™Èg1=.:file0" or missing value
[ 1112.332760] overlayfs: unrecognized mount option "upperlowerdir!™Èg1=.:file0" or missing value
[ 1112.407136] audit: type=1326 audit(1549451518.630:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18658 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1112.579406] IPVS: ftp: loaded support on port[0] = 21
11:11:59 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:59 executing program 0:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x80002, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080), 0x24, 0x0)

11:11:59 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:59 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:59 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={<r5=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

11:11:59 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:11:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
sched_setaffinity(r0, 0x8, &(0x7f0000000040))
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1113.236813] overlayfs: filesystem on './file0' not supported as upperdir
[ 1113.322830] IPVS: ftp: loaded support on port[0] = 21
[ 1113.444772] audit: type=1326 audit(1549451519.662:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18691 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1113.594647] overlayfs: filesystem on './file0' not supported as upperdir
[ 1113.628455] IPVS: ftp: loaded support on port[0] = 21
[ 1113.651712] IPVS: ftp: loaded support on port[0] = 21
11:11:59 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x10000038)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40800, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000001000400000800000000000000040000543be0a8042a1347bb9f61d02ea77305"], 0x24, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={<r2=>0x0, 0x5}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x84, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0xb54c, @rand_addr="b07bbc38b1766a3a2057798a27c7bad7", 0xffffffffffffffab}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in6={0xa, 0x4e24, 0x1, @empty, 0x20}, @in6={0xa, 0x4e23, 0x76f3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000280)=0x10)

[ 1113.706255] IPVS: ftp: loaded support on port[0] = 21
11:12:00 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:00 executing program 0:
mkdir(&(0x7f0000000140)='./file1\x00', 0x5c)
mkdir(&(0x7f00000000c0)='./file1\x00', 0xfffffffffffffffc)
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100, 0x10000)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x2, r0})
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1114.036277] overlayfs: filesystem on './file0' not supported as upperdir
11:12:00 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$l2tp(0x18, 0x1, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, &(0x7f00005d8000/0x4000)=nil})
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
msgget$private(0x0, 0x500)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a31f36a1e5b6cc34c6aee0bdc32e5a0f99ef78effde63d2bd7234ebad8160a67e4b1cfd51ed254dd39d66ffbeb5c227899f9a5afd772476558a5cbdcd7b5f02b736f72211257c290da2a6ccdaed262bf704096802960a3fe255f38d2f53bfc7f4def00559d38c68890bec31b7170afc30c8a5cb58ae94f92d4e3cc7cae0e38ba934b7eb70ae885efa8070250101e54fd8f106977b15ba8875fd62e2b98694a30fa0d464afa4dadf57d29c754cda64ed29c0115f95000000000000000000000000"], 0xc3)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={<r5=>0x0, 0x80000001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x6a28, 0x6}, 0x90)
getpid()
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000a40)=0xffffffffffffffab)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
seccomp(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

11:12:00 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file1\x00', 0x6, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="a76729e7ef8007999bcec15daabbe952ec078f9d343c21ecdad58e36e2d46a366d43f6e3548cbf38e6d7ed88943f48201894c522f8c8c520e2d1ceeae39ebc93145eda6f5d18e0d04d10f39a96a31613c683b48fabfda1", 0x57, 0x9}, {&(0x7f0000000340)="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", 0xfb, 0x3}], 0x4020, &(0x7f0000000280)='system.posix_acl_access\x00')
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1114.329984] IPVS: ftp: loaded support on port[0] = 21
[ 1114.421732] audit: type=1326 audit(1549451520.633:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18724 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0
[ 1114.651311] overlayfs: filesystem on './file0' not supported as upperdir
11:12:13 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x70288ed9a50aea1e)
mkdir(&(0x7f0000000140)='./file1\x00', 0x21)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[])
r0 = socket$inet(0x2, 0x1, 0x9)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0x0, 0x0, 0x108, 0x108, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffffffff, 0x7fff, 0x100000001, 0x2, '\x00', 0x1}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x4, 0x1, 'pptp\x00', 'syz0\x00', 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010fc8d00000000002000000000000000"], 0x24, 0x0)

11:12:13 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:13 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:13 executing program 3:

11:12:13 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:13 executing program 3:
r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xc8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0x0, 0x9}, 0x8)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0)

11:12:13 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a1, 0x0)

11:12:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000052848c5edf1e7e83c0d5b0552713b800100000000000000085a46755ce74ac76"], 0x24, 0x0)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SEM_STAT(r1, 0x6, 0x12, &(0x7f0000000340)=""/160)

[ 1127.398228] IPVS: ftp: loaded support on port[0] = 21
[ 1127.441715] IPVS: ftp: loaded support on port[0] = 21
11:12:13 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0)

[ 1127.615547] overlayfs: filesystem on './file0' not supported as upperdir
[ 1127.675664] IPVS: ftp: loaded support on port[0] = 21
11:12:13 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000080)='./file1\x00', 0x80000, 0x20000000000)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1127.742863] IPVS: ftp: loaded support on port[0] = 21
11:12:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="05001f023c043f3188a070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0))
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000001180))

[ 1127.890134] overlayfs: filesystem on './file0' not supported as upperdir
11:12:25 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:25 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0xffffffffffffe977}, 0x28, 0x1)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x400)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/165)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,woRkdir=./file1'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
sysfs$3(0x3)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1139.278264] overlayfs: unrecognized mount option "woRkdir=./file1" or missing value
[ 1139.343232] overlayfs: unrecognized mount option "woRkdir=./file1" or missing value
[ 1139.509570] IPVS: ftp: loaded support on port[0] = 21
11:12:25 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:25 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:25 executing program 3:
mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b802c, 0x1b00)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x400000003fd, 0x0)
write(r0, &(0x7f00000000c0)="9c87c3772cf234b870332e2eaf", 0xd)
execve(0x0, 0x0, 0x0)

11:12:25 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x8000)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x8}, 0x2)
r1 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000380))
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000004c0)={0x29, @rand_addr=0xfffffffffffeffff, 0x4e21, 0x1, 'ovf\x00', 0xe, 0xff, 0x3a}, 0x2c)
setsockopt$inet_dccp_int(r2, 0x21, 0x1b, &(0x7f0000000480)=0x5, 0x4)
fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x8, 0x12, [{0x10000, 0x0, 0x4}, {0x1f31, 0x0, 0x5}, {0x9, 0x0, 0x9}, {0xfffffffffffffff7, 0x0, 0xf4}, {0x7fff, 0x0, 0x3f}, {0xe6, 0x0, 0x8}, {0x1f8000000000000, 0x0, 0x8000000000000000}, {0x1f, 0x0, 0x1f}]})
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000500", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="d6972dea80a04dc38d6aff24ff1a0f4d9959b5625ead165b4a4a18e4782186792f98f244dbd65f4b17b73390abc3e1b9afe4", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)

11:12:25 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:25 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x3502001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40000000000025)
ptrace$cont(0x18, r0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x28})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)

[ 1139.866491] overlayfs: filesystem on './file0' not supported as upperdir
11:12:26 executing program 0:
r0 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x1f, 0x131000)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x800000, &(0x7f0000000240)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x100000}}, {@msize={'msize', 0x3d, 0x1}}, {@mmap='mmap'}], [{@dont_appraise='dont_appraise'}]}})
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000480)={0x30, 0x5, 0x0, {0x0, 0x1, 0x6, 0xbade}}, 0x30)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffffe)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x80000001)

[ 1140.183090] IPVS: ftp: loaded support on port[0] = 21
[ 1140.254390] IPVS: ftp: loaded support on port[0] = 21
[ 1140.274439] IPVS: ftp: loaded support on port[0] = 21
[ 1140.288843] overlayfs: filesystem on './file0' not supported as upperdir
11:12:26 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:12:26 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1140.723977] overlayfs: filesystem on './file0' not supported as upperdir
11:12:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0af51f023c123f3188a070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCFLSH(r1, 0x5414, 0x73fffa)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0xa2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
connect$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x7, 0xfffffffffffffffe, 0x4, "4b722eaed05bb63298ca9aec0597e97cd56b059775459e292272d7c96032b4bb55a5e5aeca678893a85895340f56fe53d602213d3d82e4d012a5e16876beef", 0xf}, 0x60)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file1\x00', r2}, 0xffffff2f)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)={<r4=>0x0, 0xe, "87de3723f306e7fdf672c1116656"}, &(0x7f0000000380)=0x16)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000003c0)={r4, 0x903, 0xec09}, &(0x7f0000000400)=0x8)
fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1140.849499] IPVS: ftp: loaded support on port[0] = 21
[ 1141.119634] overlayfs: filesystem on './file0' not supported as upperdir
11:12:27 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={<r1=>0x0, 0x48000, 0x20, 0xfffffffffffffffd, 0x8001}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x7}, &(0x7f0000000180)=0x8)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1141.496246] overlayfs: filesystem on './file0' not supported as upperdir
11:12:27 executing program 0:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
recvmmsg(r0, &(0x7f0000006e80)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000080)}, {&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000680)=""/188, 0xbc}], 0x7, &(0x7f00000007c0)=""/84, 0x54}, 0x1}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/186, 0xba}, {&(0x7f0000000980)=""/13, 0xd}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/137, 0x89}, {&(0x7f0000000a80)=""/240, 0xf0}, {&(0x7f0000000b80)=""/153, 0x99}], 0x7}, 0x3f4}, {{&(0x7f0000002d00)=@ipx, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/206, 0xce}, {&(0x7f0000003e80)=""/6, 0x6}, {&(0x7f0000003ec0)=""/96, 0x60}], 0x4, &(0x7f0000003f80)=""/76, 0x4c}, 0x8}, {{&(0x7f0000004000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004080)=""/140, 0x8c}], 0x1, &(0x7f0000004180)=""/4096, 0x1000}, 0x8000}, {{&(0x7f0000005180)=@alg, 0x80, &(0x7f0000005240)=[{&(0x7f0000005200)=""/7, 0x7}], 0x1, &(0x7f0000005280)=""/242, 0xf2}, 0x8}, {{&(0x7f0000005380)=@hci, 0x80, &(0x7f0000006840)=[{&(0x7f0000005400)=""/6, 0x6}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/130, 0x82}, {&(0x7f0000006500)=""/161, 0xa1}, {&(0x7f00000065c0)=""/244, 0xf4}, {&(0x7f00000066c0)=""/104, 0x68}, {&(0x7f0000006740)=""/117, 0x75}, {&(0x7f00000067c0)=""/91, 0x5b}], 0x8, &(0x7f00000068c0)=""/83, 0x53}, 0x9}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006940)=""/27, 0x1b}, {&(0x7f0000006980)=""/117, 0x75}, {&(0x7f0000006a00)=""/202, 0xca}, {&(0x7f0000006b00)=""/166, 0xa6}, {&(0x7f0000006bc0)=""/111, 0x6f}, {&(0x7f0000006c40)=""/237, 0xed}], 0x6}, 0x3}, {{0x0, 0x0, &(0x7f0000006dc0), 0x0, &(0x7f0000006e00)=""/78, 0x4e}, 0x8}], 0x8, 0x3, &(0x7f0000007080)={0x77359400})

[ 1141.756772] overlayfs: filesystem on './file0' not supported as upperdir
11:12:41 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:41 executing program 3:

11:12:41 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:41 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file1\x00', 0x101000, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:12:41 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:41 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:42 executing program 3:

11:12:42 executing program 3:

[ 1156.334036] IPVS: ftp: loaded support on port[0] = 21
[ 1156.370177] IPVS: ftp: loaded support on port[0] = 21
11:12:42 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020001000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)

[ 1156.398167] IPVS: ftp: loaded support on port[0] = 21
11:12:42 executing program 3:

[ 1156.514113] IPVS: ftp: loaded support on port[0] = 21
11:12:42 executing program 3:

11:12:42 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1156.888036] overlayfs: filesystem on './file0' not supported as upperdir
[ 1157.227887] IPVS: ftp: loaded support on port[0] = 21
11:12:52 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:52 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:52 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:52 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x121080, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
connect$l2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x0, 0x1, 0x4, 0x1}}, 0x2e)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file2\x00', 0x8, 0x1)
lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x800, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x2, r3}, {0x2, 0x3, r3}], {}, [], {0x10, 0x5}}, 0x3c, 0x0)

[ 1166.681806] overlayfs: filesystem on './file0' not supported as upperdir
[ 1166.702616] IPVS: ftp: loaded support on port[0] = 21
[ 1166.785302] IPVS: ftp: loaded support on port[0] = 21
[ 1166.920831] IPVS: ftp: loaded support on port[0] = 21
11:12:52 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:52 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:52 executing program 0:
r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8001, 0x200)
r1 = eventfd2(0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x4})
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

11:12:52 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:52 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1167.148182] overlayfs: filesystem on './file0' not supported as upperdir
11:12:53 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={<r0=>0xffffffffffffff9c})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000240)=0x4)
r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowe\a\x00ir=.:file0,workdir=./file1'])
signalfd(r1, &(0x7f0000000080)={0x2}, 0x8)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1167.291257] IPVS: ftp: loaded support on port[0] = 21
[ 1167.301766] IPVS: ftp: loaded support on port[0] = 21
[ 1167.403227] IPVS: ftp: loaded support on port[0] = 21
[ 1167.431795] IPVS: ftp: loaded support on port[0] = 21
11:12:53 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000280)={@remote}, &(0x7f0000000340)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, r1}, 0xc)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)

[ 1167.555421] overlayfs: unrecognized mount option "lowe" or missing value
[ 1167.583676] overlayfs: unrecognized mount option "lowe" or missing value
11:12:53 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:12:53 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="0000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0)

[ 1167.932093] IPVS: ftp: loaded support on port[0] = 21
11:12:53 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1168.252368] overlayfs: filesystem on './file0' not supported as upperdir
[ 1168.288721] IPVS: ftp: loaded support on port[0] = 21
11:13:05 executing program 0:
mkdir(&(0x7f0000000080)='./file1\x00', 0x4000000000000)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f0000000ac0)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x404)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e)
mount$overlay(0x400000, &(0x7f0000000300)='./file2\x00', &(0x7f0000000100)='overlay\x00', 0x100000, &(0x7f0000000240)=ANY=[])
execve(&(0x7f0000000240)='./file1\x00', &(0x7f00000004c0)=[&(0x7f0000000440)='vmnet0vboxnet1)cpuset\x00', &(0x7f0000000480)=')\\\x00'], &(0x7f0000000980)=[&(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000780)='/dev/dmmidi#\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000800)='system.posix_acl_access\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f00000008c0)='vboxnet1,\x00', &(0x7f0000000900)='/dev/dmmidi#\x00', &(0x7f0000000940)='selinuxuser\x00'])
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000100000000800000040000020000000010000000000000002000000000000000"], 0x1, 0x2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @loopback}], 0x20)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000680)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="d6000000758927a6a14fe654df636959226d18ac8d832c419b352e5acd53a17efc506ee281430bd8189af0b2e690d3ef46ac7cd7add91f4058617341e4692719268d83920ce0015b5ea594f711fda9fb9d1f787acefa46d028f450ee196a684a0e6c58a92678f5ea584cc0e382dc9708f7870b40d794a7afd89f724ac1b9e4f4c8e386469d5d44b18b6bd6ac2a774cd4a29b9634225e6d29b6fff2e2d9116d813dcc2332680b60b976ccc709a6af054f6e02882fbd8fa26911c194837bb213701703a3206e5cf2fdd6dcababa53252f47491366db1e769e1eb1733918ca71a56dfbb630000000000"], &(0x7f0000000540)=0xde)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={<r3=>r2, @in={{0x2, 0x4e22, @multicast2}}, 0x2, 0x800, 0x1f, 0x1f, 0x100}, &(0x7f0000000640)=0x98)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000a00)={r3, 0x4, 0x30}, 0xc)

11:13:05 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1180.365492] IPVS: ftp: loaded support on port[0] = 21
11:13:06 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1181.343855] IPVS: ftp: loaded support on port[0] = 21
11:13:07 executing program 2:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:13:07 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:13:07 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {0x4, 0x800000000000}}, 0xfffffffffffffe65, 0x0)

11:13:07 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x1})
r2 = userfaultfd(0x0)
close(r2)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r2, r0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

11:13:07 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0xffbf)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/100, 0x64)
dup3(r1, r0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1181.609539] IPVS: ftp: loaded support on port[0] = 21
[ 1181.616436] overlayfs: filesystem on './file0' not supported as upperdir
11:13:07 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xc79, 0x6, 0x8001, 0x3ff, 0x10001, 0x9, 0x9, 0x1f, <r1=>0x0}, &(0x7f0000000140)=0x20)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000380), 0x4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x0, 0x1, [0xfffffffffffffffa]}, 0xa)
r2 = open(&(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40), 0x24, 0x0)
setxattr$security_capability(&(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x1, 0x8}, {0x0, 0x1}]}, 0x14, 0x2)

[ 1181.823053] IPVS: ftp: loaded support on port[0] = 21
[ 1181.854354] IPVS: ftp: loaded support on port[0] = 21
[ 1181.889836] ==================================================================
[ 1181.897607] BUG: KASAN: use-after-free in get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1181.904815] Read of size 8 at addr ffff88808b45d510 by task syz-executor5/19043
[ 1181.912270] 
[ 1181.913912] CPU: 0 PID: 19043 Comm: syz-executor5 Not tainted 5.0.0-rc5 #60
[ 1181.921009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1181.930366] Call Trace:
[ 1181.932967]  dump_stack+0x172/0x1f0
[ 1181.936607]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1181.941462]  print_address_description.cold+0x7c/0x20d
[ 1181.946754]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1181.951610]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1181.956464]  kasan_report.cold+0x1b/0x40
[ 1181.960538]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1181.965396]  __asan_report_load8_noabort+0x14/0x20
[ 1181.970338]  get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1181.975021]  mem_cgroup_try_charge+0x238/0x5e0
[ 1181.979604]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1181.979711]  mcopy_atomic+0x893/0x2600
[ 1181.979726]  ? find_held_lock+0x35/0x130
[ 1181.979754]  ? mm_alloc_pmd+0x300/0x300
[ 1181.979774]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1181.979790]  ? _copy_from_user+0xdd/0x150
[ 1181.979891]  userfaultfd_ioctl+0x4dd/0x39e0
[ 1181.979916]  ? userfaultfd_read+0x1940/0x1940
[ 1181.979936]  ? mark_held_locks+0x100/0x100
[ 1182.020111]  ? kcov_ioctl+0x53/0x210
[ 1182.023913]  ? __might_fault+0x12b/0x1e0
[ 1182.027985]  ? find_held_lock+0x35/0x130
[ 1182.032048]  ? __fget+0x340/0x540
[ 1182.032067]  ? userfaultfd_read+0x1940/0x1940
[ 1182.032134]  do_vfs_ioctl+0xd6e/0x1390
[ 1182.032148]  ? userfaultfd_read+0x1940/0x1940
[ 1182.048594]  ? do_vfs_ioctl+0xd6e/0x1390
[ 1182.052647]  ? ioctl_preallocate+0x210/0x210
[ 1182.057041]  ? __fget+0x367/0x540
[ 1182.060486]  ? iterate_fd+0x360/0x360
[ 1182.064425]  ? nsecs_to_jiffies+0x30/0x30
[ 1182.068620]  ? security_file_ioctl+0x93/0xc0
[ 1182.073017]  ksys_ioctl+0xab/0xd0
[ 1182.076461]  __x64_sys_ioctl+0x73/0xb0
[ 1182.080339]  do_syscall_64+0x103/0x610
[ 1182.084227]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1182.089415] RIP: 0033:0x457e39
[ 1182.092593] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1182.111565] RSP: 002b:00007fca06684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1182.119260] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39
[ 1182.126513] RDX: 0000000020000100 RSI: 00000000c028aa03 RDI: 0000000000000005
[ 1182.133766] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
[ 1182.141035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fca066856d4
[ 1182.148290] R13: 00000000004c2439 R14: 00000000004d4d18 R15: 00000000ffffffff
[ 1182.155553] 
[ 1182.157166] Allocated by task 19034:
[ 1182.160869]  save_stack+0x45/0xd0
[ 1182.164312]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 1182.169235]  kasan_slab_alloc+0xf/0x20
[ 1182.173106]  kmem_cache_alloc_node+0x144/0x710
[ 1182.177727]  copy_process.part.0+0x1d08/0x79a0
[ 1182.182300]  _do_fork+0x257/0xfe0
[ 1182.185742]  __x64_sys_clone+0xbf/0x150
[ 1182.189700]  do_syscall_64+0x103/0x610
[ 1182.193576]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1182.198745] 
[ 1182.200356] Freed by task 19034:
[ 1182.203706]  save_stack+0x45/0xd0
[ 1182.207145]  __kasan_slab_free+0x102/0x150
[ 1182.211367]  kasan_slab_free+0xe/0x10
[ 1182.215153]  kmem_cache_free+0x86/0x260
[ 1182.219110]  free_task+0xdd/0x120
[ 1182.222546]  copy_process.part.0+0x1a3a/0x79a0
[ 1182.227112]  _do_fork+0x257/0xfe0
[ 1182.230560]  __x64_sys_clone+0xbf/0x150
[ 1182.234537]  do_syscall_64+0x103/0x610
[ 1182.238411]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1182.243576] 
[ 1182.245191] The buggy address belongs to the object at ffff88808b45c440
[ 1182.245191]  which belongs to the cache task_struct(97:syz5) of size 6080
[ 1182.258711] The buggy address is located 4304 bytes inside of
[ 1182.258711]  6080-byte region [ffff88808b45c440, ffff88808b45dc00)
[ 1182.270738] The buggy address belongs to the page:
[ 1182.275656] page:ffffea00022d1700 count:1 mapcount:0 mapping:ffff88808a443640 index:0x0 compound_mapcount: 0
[ 1182.285605] flags: 0x1fffc0000010200(slab|head)
[ 1182.290265] raw: 01fffc0000010200 ffffea00015bb108 ffffea0001691108 ffff88808a443640
[ 1182.298158] raw: 0000000000000000 ffff88808b45c440 0000000100000001 ffff8880a0b24240
[ 1182.306017] page dumped because: kasan: bad access detected
[ 1182.311709] page->mem_cgroup:ffff8880a0b24240
[ 1182.316181] 
[ 1182.317799] Memory state around the buggy address:
[ 1182.322714]  ffff88808b45d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1182.330080]  ffff88808b45d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1182.337421] >ffff88808b45d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1182.344759]                          ^
[ 1182.348632]  ffff88808b45d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1182.355991]  ffff88808b45d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1182.363329] ==================================================================
[ 1182.370666] Disabling lock debugging due to kernel taint
[ 1182.382781] IPVS: ftp: loaded support on port[0] = 21
11:13:08 executing program 0:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302e3a666f726b6469723d2e2f66696c653100001000000000000000000000000000"])
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000001000000000000000400000000ff7f0010000000000000002000000000000000"], 0x24, 0x0)

[ 1182.447161] overlayfs: filesystem on './file0' not supported as upperdir
[ 1182.495919] Kernel panic - not syncing: panic_on_warn set ...
[ 1182.501848] CPU: 1 PID: 19043 Comm: syz-executor5 Tainted: G    B             5.0.0-rc5 #60
[ 1182.510329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1182.519670] Call Trace:
[ 1182.522260]  dump_stack+0x172/0x1f0
[ 1182.525897]  panic+0x2cb/0x65c
[ 1182.529089]  ? __warn_printk+0xf3/0xf3
[ 1182.532974]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1182.537813]  ? preempt_schedule+0x4b/0x60
[ 1182.541956]  ? ___preempt_schedule+0x16/0x18
[ 1182.546421]  ? trace_hardirqs_on+0x5e/0x230
[ 1182.550744]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1182.555584]  end_report+0x47/0x4f
[ 1182.559037]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1182.563876]  kasan_report.cold+0xe/0x40
[ 1182.567849]  ? get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1182.572697]  __asan_report_load8_noabort+0x14/0x20
[ 1182.577628]  get_mem_cgroup_from_mm+0x28f/0x2b0
[ 1182.582294]  mem_cgroup_try_charge+0x238/0x5e0
[ 1182.586872]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1182.592407]  mcopy_atomic+0x893/0x2600
[ 1182.596293]  ? find_held_lock+0x35/0x130
[ 1182.600359]  ? mm_alloc_pmd+0x300/0x300
[ 1182.604335]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1182.609964]  ? _copy_from_user+0xdd/0x150
[ 1182.614108]  userfaultfd_ioctl+0x4dd/0x39e0
[ 1182.618428]  ? userfaultfd_read+0x1940/0x1940
[ 1182.622923]  ? mark_held_locks+0x100/0x100
[ 1182.627200]  ? kcov_ioctl+0x53/0x210
[ 1182.630916]  ? __might_fault+0x12b/0x1e0
[ 1182.634975]  ? find_held_lock+0x35/0x130
[ 1182.639029]  ? __fget+0x340/0x540
[ 1182.642478]  ? userfaultfd_read+0x1940/0x1940
11:13:08 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
syz_genetlink_get_family_id$team(0x0)
ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f00000001c0)='./file0\x00', 0x1)
r1 = userfaultfd(0x0)
close(r1)
clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400900)
read(r0, &(0x7f0000000400)=""/100, 0x64)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000})

[ 1182.646970]  do_vfs_ioctl+0xd6e/0x1390
[ 1182.650850]  ? userfaultfd_read+0x1940/0x1940
[ 1182.655339]  ? do_vfs_ioctl+0xd6e/0x1390
[ 1182.659396]  ? ioctl_preallocate+0x210/0x210
[ 1182.663801]  ? __fget+0x367/0x540
[ 1182.667254]  ? iterate_fd+0x360/0x360
[ 1182.671038]  ? nsecs_to_jiffies+0x30/0x30
[ 1182.675182]  ? security_file_ioctl+0x93/0xc0
[ 1182.679576]  ksys_ioctl+0xab/0xd0
[ 1182.683012]  __x64_sys_ioctl+0x73/0xb0
[ 1182.686884]  do_syscall_64+0x103/0x610
[ 1182.690754]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1182.695947] RIP: 0033:0x457e39
[ 1182.699125] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1182.718005] RSP: 002b:00007fca06684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1182.725710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39
[ 1182.732970] RDX: 0000000020000100 RSI: 00000000c028aa03 RDI: 0000000000000005
[ 1182.740220] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
[ 1182.747468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fca066856d4
[ 1182.754720] R13: 00000000004c2439 R14: 00000000004d4d18 R15: 00000000ffffffff
[ 1182.763283] Kernel Offset: disabled
[ 1182.766926] Rebooting in 86400 seconds..