1537.724437][T17421] overlayfs: workdir and upperdir must be separate subtrees
10:40:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:40 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3b, 0x0, 0x0, [{}]})

10:40:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x17000000, 0x43400)

[ 1538.042172][T17530] overlayfs: workdir and upperdir must be separate subtrees
[ 1538.078599][T17531] overlayfs: missing 'lowerdir'
10:40:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:40 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3c, 0x0, 0x0, [{}]})

[ 1538.434865][T17683] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
[ 1538.466159][T17710] overlayfs: workdir and upperdir must be separate subtrees
[ 1538.478881][T17683] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
10:40:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x18000000, 0x43400)

10:40:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1538.758097][T17759] overlayfs: failed to resolve './fil': -2
[ 1538.833387][T17760] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
[ 1538.890551][T17760] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
10:40:41 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:41 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x19000000, 0x43400)

10:40:41 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:41 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3d, 0x0, 0x0, [{}]})

10:40:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1539.490508][T17878] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
[ 1539.507789][T17876] overlayfs: failed to resolve './fil': -2
[ 1539.536493][T17878] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
10:40:41 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1539.605902][T17879] overlayfs: './file0' not a directory
10:40:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:41 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1a000000, 0x43400)

[ 1539.877472][T18090] overlayfs: failed to resolve './fil': -2
[ 1539.911883][T18091] overlayfs: unrecognized mount option "upper" or missing value
[ 1539.974446][   T28] kauditd_printk_skb: 19 callbacks suppressed
[ 1539.974464][   T28] audit: type=1804 audit(1581676842.199:723): pid=18090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1706/bus/file0" dev="sda1" ino=16786 res=1
10:40:42 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:42 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1540.129451][   T28] audit: type=1804 audit(1581676842.239:724): pid=18091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1815/bus/file0" dev="sda1" ino=16801 res=1
[ 1540.168437][T18096] overlayfs: './file0' not a directory
[ 1540.234668][   T28] audit: type=1804 audit(1581676842.329:725): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1576/bus/file0" dev="overlay" ino=16712 res=1
[ 1540.294259][T18197] overlayfs: unrecognized mount option "upper" or missing value
[ 1540.330857][T18205] overlayfs: failed to resolve './file': -2
[ 1540.377468][   T28] audit: type=1804 audit(1581676842.609:726): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1816/bus/file0" dev="sda1" ino=16665 res=1
[ 1540.512568][   T28] audit: type=1804 audit(1581676842.619:727): pid=18205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1707/bus/file0" dev="sda1" ino=16677 res=1
10:40:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1b000000, 0x43400)

10:40:43 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x2, 0x0, [{}]})

10:40:43 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:43 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1540.948323][T18317] overlayfs: failed to resolve './file': -2
[ 1540.969651][T18319] overlayfs: unrecognized mount option "upper" or missing value
10:40:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1541.006700][   T28] audit: type=1804 audit(1581676843.239:728): pid=18317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1708/bus/file0" dev="sda1" ino=17169 res=1
10:40:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1541.086273][   T28] audit: type=1804 audit(1581676843.239:729): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1817/bus/file0" dev="sda1" ino=17185 res=1
[ 1541.216067][   T28] audit: type=1804 audit(1581676843.359:730): pid=18322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1577/bus/file0" dev="overlay" ino=16884 res=1
10:40:43 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x3, 0x0, [{}]})

10:40:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1c000000, 0x43400)

[ 1541.317543][   T28] audit: type=1804 audit(1581676843.389:731): pid=18390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1577/bus/bus/file0" dev="overlay" ino=16737 res=1
[ 1541.333271][T18429] overlayfs: failed to resolve './file': -2
[ 1541.373509][T18431] overlayfs: workdir and upperdir must be separate subtrees
10:40:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1541.520514][   T28] audit: type=1804 audit(1581676843.679:732): pid=18431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1818/bus/file0" dev="sda1" ino=16534 res=1
10:40:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:44 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x4, 0x0, [{}]})

[ 1541.790086][T18641] overlayfs: workdir and upperdir must be separate subtrees
10:40:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1d000000, 0x43400)

10:40:44 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:44 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1542.249322][T18818] overlayfs: workdir and upperdir must be separate subtrees
10:40:45 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x0}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:45 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1e000000, 0x43400)

10:40:45 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x5, 0x0, [{}]})

10:40:45 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:45 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:45 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1543.067826][T18975] overlayfs: failed to resolve './fil': -2
10:40:45 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:45 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x6, 0x0, [{}]})

10:40:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1f000000, 0x43400)

10:40:45 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1543.529257][T19090] overlayfs: failed to resolve './fil': -2
10:40:45 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1543.865354][T19103] overlayfs: failed to resolve './fil': -2
10:40:46 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x2}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:46 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:46 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x7, 0x0, [{}]})

10:40:46 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:46 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x20000000, 0x43400)

[ 1544.571951][T19316] overlayfs: failed to resolve './file': -2
10:40:46 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:46 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:47 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x8, 0x0, [{}]})

10:40:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x21000000, 0x43400)

[ 1544.921610][T19427] overlayfs: failed to resolve './file': -2
[ 1544.985212][   T28] kauditd_printk_skb: 15 callbacks suppressed
[ 1544.985229][   T28] audit: type=1804 audit(1581676847.209:748): pid=19427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1825/bus/file0" dev="sda1" ino=16632 res=1
10:40:47 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1545.230149][T19499] overlayfs: failed to resolve './file': -2
[ 1545.282341][   T28] audit: type=1804 audit(1581676847.509:749): pid=19499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1826/bus/file0" dev="sda1" ino=16642 res=1
[ 1545.421914][   T28] audit: type=1804 audit(1581676847.649:750): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1583/bus/file0" dev="overlay" ino=16523 res=1
10:40:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x22000000, 0x43400)

10:40:48 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:48 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:48 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x300, 0x0, [{}]})

10:40:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x3}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1546.232539][   T28] audit: type=1804 audit(1581676848.459:751): pid=19656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1584/bus/file0" dev="sda1" ino=16709 res=1
10:40:48 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1546.350977][   T28] audit: type=1804 audit(1581676848.539:752): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1584/bus/bus/file0" dev="sda1" ino=16537 res=1
10:40:48 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x500, 0x0, [{}]})

10:40:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x23000000, 0x43400)

10:40:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:48 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1546.752640][   T28] audit: type=1804 audit(1581676848.979:753): pid=19778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1585/bus/file0" dev="overlay" ino=16563 res=1
[ 1546.784977][T19778] overlayfs: './file0' not a directory
10:40:49 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x600, 0x0, [{}]})

10:40:49 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x24000000, 0x43400)

10:40:49 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1547.369737][   T28] audit: type=1804 audit(1581676849.599:754): pid=19976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1586/bus/file0" dev="overlay" ino=16563 res=1
[ 1547.473054][   T28] audit: type=1804 audit(1581676849.669:755): pid=20117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1586/bus/file0" dev="overlay" ino=16563 res=1
10:40:50 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x4}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:50 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:50 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x700, 0x0, [{}]})

10:40:50 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x25000000, 0x43400)

10:40:50 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:50 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1548.289132][   T28] audit: type=1804 audit(1581676850.519:756): pid=20218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1587/bus/file0" dev="overlay" ino=17137 res=1
[ 1548.313301][T20218] overlayfs: './file0' not a directory
10:40:50 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:50 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0xff00, 0x0, [{}]})

[ 1548.427058][   T28] audit: type=1804 audit(1581676850.579:757): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1587/bus/bus/file0" dev="overlay" ino=17169 res=1
10:40:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x26000000, 0x43400)

10:40:51 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:51 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x6}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:51 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x27000000, 0x43400)

10:40:51 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:51 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:52 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:52 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:52 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x2, [{}]})

10:40:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x28000000, 0x43400)

[ 1550.189514][   T28] kauditd_printk_skb: 5 callbacks suppressed
[ 1550.189531][   T28] audit: type=1804 audit(1581676852.419:763): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1724/bus/file0" dev="overlay" ino=16486 res=1
10:40:52 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0)

10:40:52 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1550.379723][   T28] audit: type=1804 audit(1581676852.609:764): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1590/bus/file0" dev="overlay" ino=16658 res=1
[ 1550.717301][   T28] audit: type=1804 audit(1581676852.949:765): pid=20801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1725/bus/file0" dev="overlay" ino=16642 res=1
10:40:53 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x8}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:53 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x3, [{}]})

10:40:53 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x29000000, 0x43400)

10:40:53 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0)

10:40:53 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:53 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0)

[ 1551.482489][   T28] audit: type=1804 audit(1581676853.709:766): pid=21002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1591/bus/file0" dev="overlay" ino=16852 res=1
10:40:53 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:53 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x4, [{}]})

[ 1551.585897][   T28] audit: type=1804 audit(1581676853.709:767): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1726/bus/file0" dev="overlay" ino=16884 res=1
[ 1551.645605][   T28] audit: type=1804 audit(1581676853.799:768): pid=21006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1591/bus/bus/file0" dev="overlay" ino=16897 res=1
10:40:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2a000000, 0x43400)

[ 1551.946635][   T28] audit: type=1804 audit(1581676854.179:769): pid=21115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1592/bus/file0" dev="overlay" ino=16867 res=1
10:40:54 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:54 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1552.069761][   T28] audit: type=1804 audit(1581676854.269:770): pid=21203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1592/bus/bus/file0" dev="overlay" ino=17026 res=1
[ 1552.450507][   T28] audit: type=1804 audit(1581676854.679:771): pid=21285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1839/bus/file0" dev="overlay" ino=16722 res=1
[ 1552.508873][   T28] audit: type=1804 audit(1581676854.719:772): pid=21300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1728/bus/file0" dev="overlay" ino=16706 res=1
10:40:55 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x0, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:55 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x5, [{}]})

10:40:55 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:55 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2b000000, 0x43400)

10:40:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:55 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:55 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x6, [{}]})

10:40:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2c000000, 0x43400)

10:40:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:40:56 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:40:57 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:57 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x7, [{}]})

10:40:57 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:57 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2d000000, 0x43400)

10:40:57 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:40:57 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1555.311315][   T28] kauditd_printk_skb: 10 callbacks suppressed
[ 1555.311336][   T28] audit: type=1804 audit(1581676857.539:783): pid=21782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1732/bus/file0" dev="overlay" ino=17058 res=1
[ 1555.352564][T21781] overlayfs: failed to resolve './bus': -2
10:40:57 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:57 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x8, [{}]})

10:40:57 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2e000000, 0x43400)

[ 1555.520122][   T28] audit: type=1804 audit(1581676857.599:784): pid=21786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1595/bus/file0" dev="sda1" ino=17123 res=1
10:40:57 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1555.645859][   T28] audit: type=1804 audit(1581676857.629:785): pid=21786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1595/bus/file0" dev="sda1" ino=17123 res=1
10:40:58 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(0x0, 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1555.844555][   T28] audit: type=1804 audit(1581676857.709:786): pid=21781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1843/bus/file0" dev="sda1" ino=16966 res=1
[ 1555.984413][   T28] audit: type=1804 audit(1581676858.139:787): pid=22065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1596/bus/file0" dev="overlay" ino=16803 res=1
10:40:58 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x300, [{}]})

[ 1556.441503][   T28] audit: type=1804 audit(1581676858.669:788): pid=22217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1597/bus/file0" dev="overlay" ino=16580 res=1
[ 1556.447979][T22217] overlayfs: './file0' not a directory
[ 1556.487623][   T28] audit: type=1804 audit(1581676858.719:789): pid=22219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1597/bus/bus/file0" dev="overlay" ino=16616 res=1
10:40:58 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:40:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2f000000, 0x43400)

10:40:58 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:40:58 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x36, 0x0, 0x0, [{}]})

10:40:58 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xe000000, 0x43400)

10:40:58 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x500, [{}]})

[ 1556.763688][   T28] audit: type=1804 audit(1581676858.989:790): pid=22230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1598/bus/file0" dev="overlay" ino=16663 res=1
10:40:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x30000000, 0x43400)

[ 1556.835275][T22230] overlayfs: './file0' not a directory
10:40:59 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x600, [{}]})

[ 1556.933851][   T28] audit: type=1804 audit(1581676859.159:791): pid=22229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1845/bus/file0" dev="overlay" ino=16643 res=1
10:40:59 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:40:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x9000000, 0x43400)

10:40:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x31000000, 0x43400)

[ 1557.293403][T22347] overlayfs: missing 'lowerdir'
[ 1557.344107][   T28] audit: type=1804 audit(1581676859.569:792): pid=22379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1599/bus/file0" dev="overlay" ino=16663 res=1
10:40:59 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x700, [{}]})

[ 1557.809623][T22649] overlayfs: './file0' not a directory
10:41:00 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:00 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x2c, 0x0, 0x0, [{}]})

10:41:00 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x32000000, 0x43400)

10:41:00 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x29, 0x0, 0x0, [{}]})

10:41:00 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x6, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:00 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0xff00, [{}]})

10:41:00 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x1000000, [{}]})

10:41:00 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x33000000, 0x43400)

10:41:00 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:01 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x2000000, [{}]})

10:41:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x34000000, 0x43400)

10:41:01 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x35000000, 0x43400)

10:41:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:01 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x3000000, [{}]})

10:41:02 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x8, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:02 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:41:02 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x4000000, [{}]})

10:41:02 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x36000000, 0x43400)

10:41:02 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x48000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1560.499119][   T28] kauditd_printk_skb: 13 callbacks suppressed
[ 1560.499135][   T28] audit: type=1804 audit(1581676862.729:806): pid=23329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1849/bus/file0" dev="sda1" ino=16708 res=1
[ 1560.568425][T23332] overlayfs: './file0' not a directory
10:41:02 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x1a, 0x0, 0x0, [{}]})

[ 1560.603227][   T28] audit: type=1804 audit(1581676862.829:807): pid=23335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1605/bus/file0" dev="sda1" ino=16850 res=1
10:41:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x37000000, 0x43400)

[ 1560.690071][   T28] audit: type=1804 audit(1581676862.919:808): pid=23416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1605/bus/bus/file0" dev="sda1" ino=16535 res=1
10:41:03 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x5000000, [{}]})

[ 1561.023497][   T28] audit: type=1804 audit(1581676863.249:809): pid=23442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1850/bus/file0" dev="overlay" ino=16527 res=1
[ 1561.070717][T23448] overlayfs: failed to resolve './bus': -2
10:41:03 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1561.104785][   T28] audit: type=1804 audit(1581676863.319:810): pid=23449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1606/bus/file0" dev="sda1" ino=16994 res=1
10:41:03 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x6000000, [{}]})

10:41:03 executing program 3 (fault-call:7 fault-nth:0):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:41:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x38000000, 0x43400)

[ 1561.462580][   T28] audit: type=1804 audit(1581676863.689:811): pid=23555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1607/bus/file0" dev="overlay" ino=16644 res=1
[ 1561.687698][   T28] audit: type=1804 audit(1581676863.919:812): pid=23644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1740/bus/file0" dev="overlay" ino=16913 res=1
[ 1561.724908][T23644] FAULT_INJECTION: forcing a failure.
[ 1561.724908][T23644] name failslab, interval 1, probability 0, space 0, times 0
[ 1561.777209][T23644] CPU: 1 PID: 23644 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0
[ 1561.786455][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1561.796566][   T28] audit: type=1804 audit(1581676863.919:813): pid=23560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1851/bus/file0" dev="overlay" ino=16930 res=1
[ 1561.796610][T23644] Call Trace:
[ 1561.828326][T23644]  dump_stack+0x197/0x210
[ 1561.832810][T23644]  should_fail.cold+0x5/0xd
[ 1561.837378][T23644]  ? fault_create_debugfs_attr+0x140/0x140
[ 1561.843219][T23644]  ? ___might_sleep+0x163/0x2c0
[ 1561.848108][T23644]  __should_failslab+0xb7/0x100
[ 1561.852986][T23644]  should_failslab+0x9/0x14
[ 1561.857518][T23644]  __kmalloc+0x2e0/0x770
[ 1561.861764][T23644]  ? mark_held_locks+0xf0/0xf0
[ 1561.866521][T23644]  ? _parse_integer+0x190/0x190
[ 1561.871394][T23644]  ? tomoyo_realpath_from_path+0xc5/0x660
[ 1561.877272][T23644]  tomoyo_realpath_from_path+0xc5/0x660
[ 1561.883157][T23644]  ? tomoyo_path_number_perm+0x193/0x520
[ 1561.888922][T23644]  tomoyo_path_number_perm+0x1dd/0x520
[ 1561.894385][T23644]  ? tomoyo_path_number_perm+0x193/0x520
[ 1561.900904][T23644]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1561.906733][T23644]  ? __f_unlock_pos+0x19/0x20
[ 1561.911437][T23644]  ? ___might_sleep+0x163/0x2c0
[ 1561.916535][T23644]  ? selinux_file_mprotect+0x620/0x620
[ 1561.922041][T23644]  ? __fget_files+0x359/0x520
[ 1561.926834][T23644]  ? ksys_dup3+0x3e0/0x3e0
[ 1561.931252][T23644]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1561.938584][T23644]  ? fput_many+0x12c/0x1a0
[ 1561.943030][T23644]  tomoyo_file_ioctl+0x23/0x30
[ 1561.947807][T23644]  security_file_ioctl+0x77/0xc0
[ 1561.952747][T23644]  ksys_ioctl+0x56/0x180
[ 1561.957104][T23644]  __x64_sys_ioctl+0x73/0xb0
[ 1561.961719][T23644]  do_syscall_64+0xfa/0x790
[ 1561.966244][T23644]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1561.972127][T23644] RIP: 0033:0x45c6c9
[ 1561.976012][T23644] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1561.995926][T23644] RSP: 002b:00007f2dfc42fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1562.004866][T23644] RAX: ffffffffffffffda RBX: 00007f2dfc4306d4 RCX: 000000000045c6c9
[ 1562.012945][T23644] RDX: 00000000200003c0 RSI: 00000000c0189436 RDI: 0000000000000004
[ 1562.020928][T23644] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1562.028905][T23644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1562.037139][T23644] R13: 00000000000002ef R14: 00000000004c5330 R15: 0000000000000000
[ 1562.070553][T23644] ERROR: Out of memory at tomoyo_realpath_from_path.
10:41:04 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x75, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:04 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:04 executing program 2 (fault-call:7 fault-nth:0):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:41:04 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x7000000, [{}]})

10:41:04 executing program 3 (fault-call:7 fault-nth:1):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:41:04 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x39000000, 0x43400)

[ 1562.341435][   T28] audit: type=1804 audit(1581676864.569:814): pid=23781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1741/bus/file0" dev="overlay" ino=16804 res=1
[ 1562.348608][T23781] FAULT_INJECTION: forcing a failure.
[ 1562.348608][T23781] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1562.382969][T23781] CPU: 1 PID: 23781 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0
[ 1562.391648][T23781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1562.401718][T23781] Call Trace:
[ 1562.405026][T23781]  dump_stack+0x197/0x210
[ 1562.409386][T23781]  should_fail.cold+0x5/0xd
[ 1562.413919][T23781]  ? fault_create_debugfs_attr+0x140/0x140
[ 1562.419750][T23781]  ? __kasan_check_read+0x11/0x20
[ 1562.420745][   T28] audit: type=1804 audit(1581676864.579:815): pid=23786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1608/bus/file0" dev="overlay" ino=16725 res=1
[ 1562.424790][T23781]  should_fail_alloc_page+0x50/0x60
[ 1562.424809][T23781]  __alloc_pages_nodemask+0x1a1/0x910
[ 1562.424832][T23781]  ? avc_has_extended_perms+0x8e4/0x10f0
[ 1562.471394][T23781]  ? __alloc_pages_slowpath+0x2900/0x2900
[ 1562.477131][T23781]  ? __kasan_check_read+0x11/0x20
[ 1562.482208][T23781]  cache_grow_begin+0x90/0xc60
[ 1562.486989][T23781]  ? trace_hardirqs_off+0x62/0x240
[ 1562.492122][T23781]  __kmalloc+0x6b2/0x770
[ 1562.496375][T23781]  ? mark_held_locks+0xf0/0xf0
[ 1562.501417][T23781]  ? tomoyo_realpath_from_path+0xc5/0x660
[ 1562.507239][T23781]  tomoyo_realpath_from_path+0xc5/0x660
[ 1562.512793][T23781]  ? tomoyo_path_number_perm+0x193/0x520
[ 1562.518451][T23781]  tomoyo_path_number_perm+0x1dd/0x520
[ 1562.523915][T23781]  ? tomoyo_path_number_perm+0x193/0x520
[ 1562.529561][T23781]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1562.535375][T23781]  ? __f_unlock_pos+0x19/0x20
[ 1562.540090][T23781]  ? ___might_sleep+0x163/0x2c0
[ 1562.545943][T23781]  ? selinux_file_mprotect+0x620/0x620
[ 1562.551411][T23781]  ? __fget_files+0x359/0x520
[ 1562.556115][T23781]  ? ksys_dup3+0x3e0/0x3e0
[ 1562.560548][T23781]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1562.566795][T23781]  ? fput_many+0x12c/0x1a0
[ 1562.571233][T23781]  tomoyo_file_ioctl+0x23/0x30
[ 1562.576008][T23781]  security_file_ioctl+0x77/0xc0
[ 1562.580962][T23781]  ksys_ioctl+0x56/0x180
[ 1562.585222][T23781]  __x64_sys_ioctl+0x73/0xb0
[ 1562.589831][T23781]  do_syscall_64+0xfa/0x790
[ 1562.594353][T23781]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1562.600244][T23781] RIP: 0033:0x45c6c9
[ 1562.604148][T23781] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1562.623758][T23781] RSP: 002b:00007f2dfc42fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1562.632205][T23781] RAX: ffffffffffffffda RBX: 00007f2dfc4306d4 RCX: 000000000045c6c9
10:41:04 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x8000000, [{}]})

[ 1562.641748][T23781] RDX: 00000000200003c0 RSI: 00000000c0189436 RDI: 0000000000000004
[ 1562.649729][T23781] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1562.657704][T23781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1562.665676][T23781] R13: 00000000000002ef R14: 00000000004c5330 R15: 0000000000000001
[ 1562.696712][T23783] FAULT_INJECTION: forcing a failure.
[ 1562.696712][T23783] name failslab, interval 1, probability 0, space 0, times 0
[ 1562.736275][T23783] CPU: 1 PID: 23783 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0
[ 1562.745004][T23783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1562.755078][T23783] Call Trace:
[ 1562.758383][T23783]  dump_stack+0x197/0x210
[ 1562.762732][T23783]  should_fail.cold+0x5/0xd
[ 1562.767240][T23783]  ? fault_create_debugfs_attr+0x140/0x140
[ 1562.773039][T23783]  ? ___might_sleep+0x163/0x2c0
[ 1562.777883][T23783]  __should_failslab+0xb7/0x100
[ 1562.782718][T23783]  should_failslab+0x9/0x14
[ 1562.787234][T23783]  __kmalloc+0x2e0/0x770
[ 1562.791463][T23783]  ? mark_held_locks+0xf0/0xf0
[ 1562.796228][T23783]  ? tomoyo_realpath_from_path+0xc5/0x660
[ 1562.801941][T23783]  tomoyo_realpath_from_path+0xc5/0x660
[ 1562.807471][T23783]  ? tomoyo_path_number_perm+0x193/0x520
[ 1562.813186][T23783]  tomoyo_path_number_perm+0x1dd/0x520
[ 1562.818638][T23783]  ? tomoyo_path_number_perm+0x193/0x520
[ 1562.824877][T23783]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1562.830666][T23783]  ? __f_unlock_pos+0x19/0x20
[ 1562.835341][T23783]  ? ___might_sleep+0x163/0x2c0
[ 1562.840210][T23783]  ? selinux_file_mprotect+0x620/0x620
[ 1562.845651][T23783]  ? __fget_files+0x359/0x520
[ 1562.850322][T23783]  ? ksys_dup3+0x3e0/0x3e0
[ 1562.854723][T23783]  ? rcu_read_lock_sched_held+0x9c/0xd0
[ 1562.860258][T23783]  tomoyo_file_ioctl+0x23/0x30
[ 1562.865020][T23783]  security_file_ioctl+0x77/0xc0
[ 1562.869971][T23783]  ksys_ioctl+0x56/0x180
[ 1562.874207][T23783]  __x64_sys_ioctl+0x73/0xb0
[ 1562.878793][T23783]  do_syscall_64+0xfa/0x790
[ 1562.883288][T23783]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1562.889160][T23783] RIP: 0033:0x45c6c9
[ 1562.893061][T23783] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1562.912649][T23783] RSP: 002b:00007f72102d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1562.921043][T23783] RAX: ffffffffffffffda RBX: 00007f72102d86d4 RCX: 000000000045c6c9
[ 1562.929694][T23783] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000004
[ 1562.937657][T23783] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1562.945608][T23783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1562.953571][T23783] R13: 00000000000002ef R14: 00000000004c5330 R15: 0000000000000000
10:41:05 executing program 3 (fault-call:7 fault-nth:2):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:41:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3a000000, 0x43400)

[ 1563.014810][T23783] ERROR: Out of memory at tomoyo_realpath_from_path.
10:41:05 executing program 2 (fault-call:7 fault-nth:1):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:41:05 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1563.181219][T23896] overlayfs: './file0' not a directory
10:41:05 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0xfdfdffff, [{}]})

[ 1563.443024][T23904] FAULT_INJECTION: forcing a failure.
[ 1563.443024][T23904] name failslab, interval 1, probability 0, space 0, times 0
[ 1563.493659][T23904] CPU: 0 PID: 23904 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0
[ 1563.502375][T23904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1563.512451][T23904] Call Trace:
[ 1563.515770][T23904]  dump_stack+0x197/0x210
[ 1563.520133][T23904]  should_fail.cold+0x5/0xd
[ 1563.524767][T23904]  ? fault_create_debugfs_attr+0x140/0x140
[ 1563.530604][T23904]  ? ___might_sleep+0x163/0x2c0
[ 1563.535485][T23904]  __should_failslab+0xb7/0x100
[ 1563.540359][T23904]  should_failslab+0x9/0x14
[ 1563.544883][T23904]  __kmalloc+0x2e0/0x770
[ 1563.549157][T23904]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1563.555410][T23904]  ? d_absolute_path+0x11b/0x170
[ 1563.560355][T23904]  ? __d_path+0x140/0x140
[ 1563.564693][T23904]  ? tomoyo_encode2.part.0+0xf5/0x400
[ 1563.570082][T23904]  tomoyo_encode2.part.0+0xf5/0x400
[ 1563.575391][T23904]  tomoyo_encode+0x2b/0x50
[ 1563.579821][T23904]  tomoyo_realpath_from_path+0x19c/0x660
[ 1563.585476][T23904]  tomoyo_path_number_perm+0x1dd/0x520
[ 1563.590949][T23904]  ? tomoyo_path_number_perm+0x193/0x520
[ 1563.596599][T23904]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1563.602413][T23904]  ? finish_task_switch+0x147/0x750
[ 1563.607641][T23904]  ? ___might_sleep+0x163/0x2c0
[ 1563.612549][T23904]  ? selinux_file_mprotect+0x620/0x620
[ 1563.618017][T23904]  ? __fget_files+0x359/0x520
[ 1563.622718][T23904]  ? ksys_dup3+0x3e0/0x3e0
[ 1563.627144][T23904]  ? rcu_read_lock_sched_held+0x9c/0xd0
[ 1563.632708][T23904]  tomoyo_file_ioctl+0x23/0x30
[ 1563.637482][T23904]  security_file_ioctl+0x77/0xc0
[ 1563.642442][T23904]  ksys_ioctl+0x56/0x180
[ 1563.646706][T23904]  __x64_sys_ioctl+0x73/0xb0
[ 1563.651311][T23904]  do_syscall_64+0xfa/0x790
[ 1563.655879][T23904]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1563.661773][T23904] RIP: 0033:0x45c6c9
[ 1563.665672][T23904] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1563.685279][T23904] RSP: 002b:00007f72102d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1563.693704][T23904] RAX: ffffffffffffffda RBX: 00007f72102d86d4 RCX: 000000000045c6c9
[ 1563.701702][T23904] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000004
[ 1563.709687][T23904] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1563.717783][T23904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1563.725987][T23904] R13: 00000000000002ef R14: 00000000004c5330 R15: 0000000000000001
[ 1563.775916][T23904] ERROR: Out of memory at tomoyo_realpath_from_path.
10:41:06 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:06 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3b000000, 0x43400)

10:41:06 executing program 2 (fault-call:7 fault-nth:2):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:41:06 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:41:06 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0xff000000, [{}]})

10:41:06 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x68000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1564.820049][T24232] FAULT_INJECTION: forcing a failure.
[ 1564.820049][T24232] name failslab, interval 1, probability 0, space 0, times 0
[ 1564.846691][T24232] CPU: 0 PID: 24232 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0
[ 1564.855393][T24232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1564.865461][T24232] Call Trace:
[ 1564.868775][T24232]  dump_stack+0x197/0x210
[ 1564.873158][T24232]  should_fail.cold+0x5/0xd
[ 1564.877688][T24232]  ? fault_create_debugfs_attr+0x140/0x140
[ 1564.883513][T24232]  ? ___might_sleep+0x163/0x2c0
[ 1564.888388][T24232]  __should_failslab+0xb7/0x100
[ 1564.893261][T24232]  should_failslab+0x9/0x14
[ 1564.897775][T24232]  __kmalloc+0x2e0/0x770
[ 1564.902036][T24232]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1564.908377][T24232]  ? d_absolute_path+0x11b/0x170
[ 1564.913361][T24232]  ? __d_path+0x140/0x140
10:41:07 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0xfffffdfd, [{}]})

[ 1564.917705][T24232]  ? tomoyo_encode2.part.0+0xf5/0x400
[ 1564.923104][T24232]  tomoyo_encode2.part.0+0xf5/0x400
[ 1564.928321][T24232]  tomoyo_encode+0x2b/0x50
[ 1564.932851][T24232]  tomoyo_realpath_from_path+0x19c/0x660
[ 1564.938520][T24232]  tomoyo_path_number_perm+0x1dd/0x520
[ 1564.943990][T24232]  ? tomoyo_path_number_perm+0x193/0x520
[ 1564.949760][T24232]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1564.955679][T24232]  ? __f_unlock_pos+0x19/0x20
[ 1564.960380][T24232]  ? ___might_sleep+0x163/0x2c0
[ 1564.965381][T24232]  ? selinux_file_mprotect+0x620/0x620
[ 1564.970920][T24232]  ? __fget_files+0x359/0x520
[ 1564.975606][T24232]  ? ksys_dup3+0x3e0/0x3e0
[ 1564.980027][T24232]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1564.986288][T24232]  ? fput_many+0x12c/0x1a0
[ 1564.990827][T24232]  tomoyo_file_ioctl+0x23/0x30
[ 1564.995615][T24232]  security_file_ioctl+0x77/0xc0
[ 1565.000595][T24232]  ksys_ioctl+0x56/0x180
[ 1565.005073][T24232]  __x64_sys_ioctl+0x73/0xb0
[ 1565.009683][T24232]  do_syscall_64+0xfa/0x790
[ 1565.014207][T24232]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1565.020256][T24232] RIP: 0033:0x45c6c9
[ 1565.024167][T24232] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1565.044030][T24232] RSP: 002b:00007f72102d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1565.052458][T24232] RAX: ffffffffffffffda RBX: 00007f72102d86d4 RCX: 000000000045c6c9
[ 1565.060467][T24232] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000004
[ 1565.068452][T24232] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1565.076435][T24232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1565.084426][T24232] R13: 00000000000002ef R14: 00000000004c5330 R15: 0000000000000002
10:41:07 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x2, &(0x7f00000003c0)={0x3})

10:41:07 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3c000000, 0x43400)

[ 1565.345873][T24232] ERROR: Out of memory at tomoyo_realpath_from_path.
10:41:07 executing program 2 (fault-call:7 fault-nth:3):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1565.474781][T24344] overlayfs: failed to resolve './file0': -2
10:41:07 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x2}]})

10:41:07 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, &(0x7f00000003c0)={0x3})

[ 1565.964415][   T28] kauditd_printk_skb: 11 callbacks suppressed
[ 1565.964433][   T28] audit: type=1804 audit(1581676868.189:827): pid=24560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1613/bus/file0" dev="overlay" ino=16633 res=1
[ 1566.086331][   T28] audit: type=1804 audit(1581676868.309:828): pid=24563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1745/bus/file0" dev="overlay" ino=16789 res=1
[ 1566.135507][   T28] audit: type=1804 audit(1581676868.319:829): pid=24564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1855/bus/file0" dev="overlay" ino=16802 res=1
10:41:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3d000000, 0x43400)

10:41:08 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x3}]})

10:41:08 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:08 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:41:08 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4b47, &(0x7f00000003c0)={0x3})

[ 1566.705572][   T28] audit: type=1804 audit(1581676868.929:830): pid=24781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1746/bus/file0" dev="overlay" ino=16789 res=1
10:41:09 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x4}]})

[ 1566.824480][   T28] audit: type=1804 audit(1581676868.929:831): pid=24782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1614/bus/file0" dev="overlay" ino=16801 res=1
10:41:09 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4b49, &(0x7f00000003c0)={0x3})

[ 1566.951247][   T28] audit: type=1804 audit(1581676869.009:832): pid=24788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1614/bus/bus/file0" dev="overlay" ino=16867 res=1
10:41:09 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3e000000, 0x43400)

10:41:09 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x2, 0x0)

[ 1567.166571][   T28] audit: type=1804 audit(1581676869.139:833): pid=24780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1856/bus/file0" dev="overlay" ino=16616 res=1
10:41:09 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x5}]})

[ 1567.291893][   T28] audit: type=1804 audit(1581676869.449:834): pid=24989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1615/bus/file0" dev="overlay" ino=16602 res=1
[ 1567.368594][   T28] audit: type=1804 audit(1581676869.519:835): pid=24997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1615/bus/bus/file0" dev="overlay" ino=16590 res=1
[ 1567.399108][   T28] audit: type=1804 audit(1581676869.559:836): pid=24994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1747/bus/file0" dev="overlay" ino=16708 res=1
10:41:09 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3f000000, 0x43400)

[ 1567.848890][T25248] overlayfs: './file0' not a directory
[ 1567.913420][T25308] overlayfs: './file0' not a directory
10:41:10 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x3, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:10 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x74000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:10 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4c01, &(0x7f00000003c0)={0x3})

10:41:10 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x6, 0x0)

10:41:10 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x40000000, 0x43400)

10:41:10 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x6}]})

10:41:10 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x541b, &(0x7f00000003c0)={0x3})

[ 1568.612564][T25425] overlayfs: failed to resolve './file0': -2
10:41:10 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x7}]})

10:41:10 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x7, 0x0)

10:41:11 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x43000000, 0x43400)

10:41:11 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f00000003c0)={0x3})

10:41:11 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xa, 0x0)

[ 1569.583832][T25861] overlayfs: './file0' not a directory
10:41:12 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x4, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x44000000, 0x43400)

10:41:12 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x8}]})

10:41:12 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x2f, 0x0)

10:41:12 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5450, &(0x7f00000003c0)={0x3})

10:41:12 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x300}]})

10:41:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5d, 0x0)

10:41:12 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5451, &(0x7f00000003c0)={0x3})

10:41:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xe0ffffff, 0x43400)

[ 1570.834361][T26297] overlayfs: failed to resolve './file0': -2
[ 1570.839521][T26299] overlayfs: './file0' not a directory
10:41:13 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x1b6, 0x0)

10:41:13 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x500}]})

[ 1571.266513][   T28] kauditd_printk_skb: 20 callbacks suppressed
[ 1571.266532][   T28] audit: type=1804 audit(1581676873.489:857): pid=26513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1863/bus/file0" dev="sda1" ino=16632 res=1
[ 1571.290034][T26460] overlayfs: failed to resolve './bus': -2
[ 1571.317749][T26497] overlayfs: failed to resolve './bus': -2
[ 1571.368170][   T28] audit: type=1804 audit(1581676873.589:858): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1621/bus/file0" dev="sda1" ino=16536 res=1
10:41:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x5, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:13 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5452, &(0x7f00000003c0)={0x3})

10:41:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xf0ffffff, 0x43400)

10:41:13 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:13 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4b47, 0x0)

10:41:13 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x600}]})

[ 1571.867833][   T28] audit: type=1804 audit(1581676874.099:859): pid=26630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1622/bus/file0" dev="overlay" ino=16930 res=1
[ 1571.926355][T26703] overlayfs: './file0' not a directory
10:41:14 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5460, &(0x7f00000003c0)={0x3})

10:41:14 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4b49, 0x0)

[ 1571.989820][   T28] audit: type=1804 audit(1581676874.139:860): pid=26626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1864/bus/file0" dev="overlay" ino=16946 res=1
10:41:14 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x700}]})

10:41:14 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xf4ffffff, 0x43400)

[ 1572.141743][   T28] audit: type=1804 audit(1581676874.209:861): pid=26757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1864/bus/bus/file0" dev="overlay" ino=17042 res=1
[ 1572.417864][   T28] audit: type=1804 audit(1581676874.649:862): pid=26954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1865/bus/file0" dev="overlay" ino=16755 res=1
10:41:14 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x6364, &(0x7f00000003c0)={0x3})

[ 1572.493247][T27049] overlayfs: './file0' not a directory
10:41:14 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4c00, 0x0)

[ 1572.554471][   T28] audit: type=1804 audit(1581676874.759:863): pid=27000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1623/bus/file0" dev="overlay" ino=16869 res=1
[ 1572.628355][T27000] overlayfs: failed to resolve './file0': -2
[ 1572.939456][   T28] audit: type=1804 audit(1581676875.169:864): pid=27160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1755/bus/file0" dev="overlay" ino=16657 res=1
[ 1572.979762][   T28] audit: type=1804 audit(1581676875.189:865): pid=27161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1866/bus/file0" dev="overlay" ino=16691 res=1
[ 1573.017496][   T28] audit: type=1804 audit(1581676875.209:866): pid=27209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1866/bus/bus/file0" dev="overlay" ino=16773 res=1
10:41:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x6, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfbffffff, 0x43400)

10:41:15 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0xff00}]})

10:41:15 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x97ffffff, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4c01, 0x0)

10:41:15 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x8912, &(0x7f00000003c0)={0x3})

[ 1573.277404][T27272] overlayfs: './file0' not a directory
10:41:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4c82, 0x0)

[ 1573.356523][T27282] overlayfs: './file0' not a directory
10:41:15 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x1000000}]})

10:41:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfeffffff, 0x43400)

10:41:15 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x8933, &(0x7f00000003c0)={0x3})

[ 1573.831974][T27490] overlayfs: failed to resolve './file0': -2
10:41:16 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x541b, 0x0)

[ 1573.889438][T27492] overlayfs: './file0' not a directory
10:41:16 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x2000000}]})

[ 1574.309792][T27682] overlayfs: './file0' not a directory
[ 1574.358158][T27808] overlayfs: './file0' not a directory
10:41:17 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xbc100000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xff0f0000, 0x43400)

10:41:17 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x400454ca, &(0x7f00000003c0)={0x3})

10:41:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5421, 0x0)

10:41:17 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x7, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:17 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x3000000}]})

[ 1575.028343][T27826] overlayfs: './file0' not a directory
10:41:17 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x4000000}]})

10:41:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xffffffe0, 0x43400)

10:41:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5450, 0x0)

10:41:17 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40049409, &(0x7f00000003c0)={0x3})

10:41:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfffffff0, 0x43400)

10:41:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5451, 0x0)

[ 1575.577759][T28146] overlayfs: './file0' not a directory
10:41:18 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:18 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x5000000}]})

10:41:18 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40086602, &(0x7f00000003c0)={0x3})

10:41:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfffffff4, 0x43400)

10:41:18 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x8, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:18 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5452, 0x0)

10:41:18 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x6000000}]})

10:41:18 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40087602, &(0x7f00000003c0)={0x3})

10:41:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfffffffb, 0x43400)

[ 1576.638916][   T28] kauditd_printk_skb: 27 callbacks suppressed
[ 1576.638934][   T28] audit: type=1804 audit(1581676878.869:894): pid=28678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1873/bus/file0" dev="overlay" ino=16715 res=1
[ 1576.671007][T28679] overlayfs: './file0' not a directory
10:41:19 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x7000000}]})

10:41:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x5460, 0x0)

10:41:19 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40186366, &(0x7f00000003c0)={0x3})

[ 1576.795916][   T28] audit: type=1804 audit(1581676878.869:895): pid=28679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1630/bus/file0" dev="overlay" ino=16719 res=1
10:41:19 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1576.918060][   T28] audit: type=1804 audit(1581676878.949:896): pid=28705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1630/bus/bus/file0" dev="overlay" ino=16738 res=1
10:41:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfffffffe, 0x43400)

[ 1577.165843][   T28] audit: type=1804 audit(1581676878.969:897): pid=28706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1873/bus/file0" dev="overlay" ino=16715 res=1
[ 1577.209016][T28900] overlayfs: failed to resolve './bus': -2
10:41:19 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x8000000}]})

[ 1577.307313][   T28] audit: type=1804 audit(1581676878.969:898): pid=28704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1873/bus/file0" dev="overlay" ino=16715 res=1
10:41:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x6364, 0x0)

[ 1577.425101][   T28] audit: type=1804 audit(1581676879.469:899): pid=28903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1762/bus/file0" dev="overlay" ino=16707 res=1
[ 1577.556015][   T28] audit: type=1804 audit(1581676879.469:900): pid=28904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1631/bus/file0" dev="sda1" ino=16692 res=1
[ 1577.674544][   T28] audit: type=1804 audit(1581676879.499:901): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1874/bus/file0" dev="overlay" ino=16714 res=1
[ 1577.764768][T29117] overlayfs: './file0' not a directory
[ 1577.809320][   T28] audit: type=1804 audit(1581676879.979:902): pid=29117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1875/bus/file0" dev="overlay" ino=16653 res=1
[ 1577.903230][   T28] audit: type=1804 audit(1581676879.979:903): pid=29113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1632/bus/file0" dev="overlay" ino=16647 res=1
10:41:20 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x11, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:20 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4020940d, &(0x7f00000003c0)={0x3})

10:41:20 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x8912, 0x0)

10:41:20 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x40000000000, 0x43400)

10:41:20 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0xfdfdffff}]})

10:41:20 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfcfdffff, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1578.494275][T29240] overlayfs: './file0' not a directory
10:41:20 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0xff000000}]})

10:41:20 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x8914, 0x0)

10:41:20 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x800454d2, &(0x7f00000003c0)={0x3})

10:41:20 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x4010040c000, 0x43400)

10:41:21 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0xfffffdfd}]})

10:41:21 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x8933, 0x0)

[ 1579.434493][T29664] overlayfs: './file0' not a directory
10:41:22 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x60, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:22 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80086301, &(0x7f00000003c0)={0x3})

10:41:22 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdfdffff, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xffffffff000, 0x43400)

10:41:22 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x1000000000000}]})

10:41:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x89ea, 0x0)

10:41:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x800800000000, 0x43400)

10:41:22 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x100000000000000}]})

10:41:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x9204, 0x0)

10:41:22 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80086601, &(0x7f00000003c0)={0x3})

[ 1580.651599][T30001] overlayfs: './file0' not a directory
10:41:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xae01, 0x0)

10:41:23 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x200000000000000}]})

[ 1581.141820][T30196] overlayfs: './file0' not a directory
10:41:23 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:23 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80087601, &(0x7f00000003c0)={0x3})

10:41:23 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdffffff, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:23 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x300000000000000}]})

10:41:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1000000000000, 0x43400)

10:41:23 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x400454ca, 0x0)

[ 1581.783055][   T28] kauditd_printk_skb: 22 callbacks suppressed
[ 1581.783072][   T28] audit: type=1804 audit(1581676884.009:926): pid=30333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1767/bus/file0" dev="overlay" ino=16724 res=1
10:41:24 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x3})

[ 1581.941407][   T28] audit: type=1804 audit(1581676884.069:927): pid=30334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1882/bus/file0" dev="overlay" ino=16762 res=1
10:41:24 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40049409, 0x0)

10:41:24 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x400000000000000}]})

10:41:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x4000000000000, 0x43400)

[ 1582.049507][   T28] audit: type=1804 audit(1581676884.069:928): pid=30335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1639/bus/file0" dev="overlay" ino=16754 res=1
[ 1582.261922][   T28] audit: type=1804 audit(1581676884.149:929): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1639/bus/bus/file0" dev="overlay" ino=16817 res=1
[ 1582.420519][   T28] audit: type=1804 audit(1581676884.159:930): pid=30414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1882/bus/bus/file0" dev="overlay" ino=16833 res=1
10:41:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x10000000000000, 0x43400)

[ 1582.491938][   T28] audit: type=1804 audit(1581676884.679:931): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1768/bus/file0" dev="overlay" ino=16731 res=1
10:41:24 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4008642b, 0x0)

[ 1582.554194][   T28] audit: type=1804 audit(1581676884.699:932): pid=30637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1640/bus/file0" dev="overlay" ino=16744 res=1
[ 1582.699725][   T28] audit: type=1804 audit(1581676884.699:933): pid=30608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1883/bus/file0" dev="overlay" ino=16740 res=1
[ 1582.759702][   T28] audit: type=1804 audit(1581676884.759:934): pid=30691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1640/bus/bus/file0" dev="overlay" ino=16833 res=1
[ 1582.982917][   T28] audit: type=1804 audit(1581676885.209:935): pid=30864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1884/bus/file0" dev="overlay" ino=16631 res=1
[ 1583.028171][T30864] overlayfs: './file0' not a directory
10:41:25 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0045878, &(0x7f00000003c0)={0x3})

10:41:25 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x2, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:25 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x500000000000000}]})

10:41:25 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x40040000000000, 0x43400)

10:41:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40086602, 0x0)

10:41:25 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x600000000000000}]})

10:41:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40087602, 0x0)

10:41:26 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc01064bd, &(0x7f00000003c0)={0x3})

10:41:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x80000000000000, 0x43400)

10:41:26 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x700000000000000}]})

10:41:26 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4008b100, 0x0)

10:41:26 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0182101, &(0x7f00000003c0)={0x3})

[ 1584.602666][T31317] overlayfs: './file0' not a directory
[ 1584.648307][T31320] overlayfs: failed to resolve './file0': -2
10:41:27 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x3, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xc0400001040000, 0x43400)

10:41:27 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40104593, 0x0)

10:41:27 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:27 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x800000000000000}]})

10:41:27 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc018945c, &(0x7f00000003c0)={0x3})

10:41:27 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40186366, 0x0)

10:41:27 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0xfdfdffff00000000}]})

10:41:27 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc018945d, &(0x7f00000003c0)={0x3})

10:41:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xf0ffffff0f0000, 0x43400)

10:41:28 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x401c5820, 0x0)

10:41:28 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0xff00000000000000}]})

[ 1586.274928][T31944] overlayfs: './file0' not a directory
10:41:28 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x4, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:28 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc020660b, &(0x7f00000003c0)={0x3})

10:41:28 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdfd, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x100000000000000, 0x43400)

10:41:28 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4020940d, 0x0)

10:41:28 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x2}]})

10:41:29 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40305828, 0x0)

[ 1586.813686][   T28] kauditd_printk_skb: 26 callbacks suppressed
[ 1586.813703][   T28] audit: type=1804 audit(1581676889.039:962): pid=32094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1647/bus/file0" dev="overlay" ino=16777 res=1
10:41:29 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x2})

10:41:29 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x3}]})

[ 1586.989697][   T28] audit: type=1804 audit(1581676889.049:963): pid=32116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1891/bus/bus/file0" dev="overlay" ino=16780 res=1
10:41:29 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x200000000000000, 0x43400)

10:41:29 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x5, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

[ 1587.303083][   T28] audit: type=1804 audit(1581676889.529:964): pid=32406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1892/bus/file0" dev="overlay" ino=16631 res=1
10:41:29 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40305829, 0x0)

10:41:29 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x300000000000000, 0x43400)

[ 1587.410932][   T28] audit: type=1804 audit(1581676889.579:965): pid=32409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1775/bus/file0" dev="overlay" ino=16691 res=1
10:41:29 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x10})

[ 1587.590672][   T28] audit: type=1804 audit(1581676889.619:966): pid=32466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1892/bus/bus/file0" dev="overlay" ino=16776 res=1
10:41:29 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:29 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x4}]})

[ 1587.760202][   T28] audit: type=1804 audit(1581676889.629:967): pid=32417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1648/bus/file0" dev="overlay" ino=16777 res=1
10:41:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x400000000000000, 0x43400)

10:41:30 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x2})

[ 1587.987116][   T28] audit: type=1804 audit(1581676889.749:968): pid=32621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1648/bus/bus/file0" dev="overlay" ino=16789 res=1
10:41:30 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4030582a, 0x0)

10:41:30 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x5}]})

[ 1588.126760][   T28] audit: type=1804 audit(1581676889.769:969): pid=32594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1648/bus/bus/file0" dev="overlay" ino=16789 res=1
[ 1588.221150][   T28] audit: type=1804 audit(1581676890.209:970): pid=32733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1893/bus/file0" dev="overlay" ino=16551 res=1
[ 1588.272169][   T28] audit: type=1804 audit(1581676890.299:971): pid=375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1893/bus/file0" dev="overlay" ino=16551 res=1
10:41:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x500000000000000, 0x43400)

10:41:30 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4030582b, 0x0)

[ 1589.032831][  T799] overlayfs: './file0' not a directory
10:41:31 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x6, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:31 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x6}]})

10:41:31 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff97, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:31 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x3})

10:41:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x600000000000000, 0x43400)

10:41:31 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x40305839, 0x0)

10:41:31 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x4054561e, 0x0)

10:41:31 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x7}]})

10:41:31 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x4})

10:41:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x700000000000000, 0x43400)

10:41:32 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80044584, 0x0)

10:41:32 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x8}]})

[ 1590.479190][ T1257] overlayfs: './file0' not a directory
10:41:33 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x7, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:33 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x5})

10:41:33 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x800000000000000, 0x43400)

10:41:33 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80045430, 0x0)

10:41:33 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x300}]})

[ 1591.183146][ T1377] overlayfs: failed to resolve './bus': -2
10:41:33 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x800454d2, 0x0)

10:41:33 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x6})

10:41:33 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x500}]})

10:41:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x900000000000000, 0x43400)

10:41:33 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x7})

10:41:34 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80045500, 0x0)

[ 1592.078510][   T28] kauditd_printk_skb: 24 callbacks suppressed
[ 1592.078529][   T28] audit: type=1804 audit(1581676894.309:996): pid=1820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1901/bus/file0" dev="overlay" ino=16536 res=1
[ 1592.193683][   T28] audit: type=1804 audit(1581676894.379:997): pid=1856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1901/bus/bus/file0" dev="overlay" ino=16691 res=1
10:41:34 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x8, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:34 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x600}]})

10:41:34 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xa00000000000000, 0x43400)

10:41:34 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:34 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80086301, 0x0)

10:41:34 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x8})

[ 1592.689015][   T28] audit: type=1804 audit(1581676894.919:998): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1902/bus/file0" dev="overlay" ino=16790 res=1
10:41:35 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x300})

10:41:35 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80086601, 0x0)

10:41:35 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x700}]})

[ 1592.781524][   T28] audit: type=1804 audit(1581676894.959:999): pid=2062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1656/bus/file0" dev="overlay" ino=16803 res=1
10:41:35 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xb00000000000000, 0x43400)

[ 1592.925345][   T28] audit: type=1804 audit(1581676894.969:1000): pid=2117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1902/bus/bus/file0" dev="overlay" ino=16820 res=1
[ 1593.109297][   T28] audit: type=1804 audit(1581676894.989:1001): pid=2153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1656/bus/file0" dev="overlay" ino=16803 res=1
[ 1593.234023][   T28] audit: type=1804 audit(1581676895.419:1002): pid=2274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1784/bus/file0" dev="overlay" ino=16725 res=1
[ 1593.309386][   T28] audit: type=1804 audit(1581676895.459:1003): pid=2279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1657/bus/file0" dev="overlay" ino=16523 res=1
10:41:35 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xff00}]})

10:41:35 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x80087601, 0x0)

[ 1593.340555][   T28] audit: type=1804 audit(1581676895.469:1004): pid=2278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1903/bus/file0" dev="overlay" ino=16772 res=1
[ 1593.435932][   T28] audit: type=1804 audit(1581676895.509:1005): pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1903/bus/bus/file0" dev="overlay" ino=16820 res=1
[ 1593.769234][ T2493] overlayfs: failed to resolve './file0': -2
[ 1593.777861][ T2494] overlayfs: './file0' not a directory
10:41:36 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x11, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:36 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x500})

10:41:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xc00000000000000, 0x43400)

10:41:36 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x200000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:36 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x1000000}]})

10:41:36 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x8008af00, 0x0)

10:41:36 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x801c581f, 0x0)

10:41:36 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x600})

10:41:36 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x2000000}]})

10:41:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xd00000000000000, 0x43400)

10:41:37 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x3000000}]})

10:41:37 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x8090ae81, 0x0)

[ 1595.305973][ T3078] overlayfs: './file0' not a directory
[ 1595.320354][ T3077] overlayfs: './file0' not a directory
10:41:38 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xe00000000000000, 0x43400)

10:41:38 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x700})

10:41:38 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:38 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x4000000}]})

10:41:38 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0045878, 0x0)

10:41:38 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0045878, 0x0)

10:41:38 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x5000000}]})

10:41:38 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0xff00})

10:41:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xf00000000000000, 0x43400)

10:41:38 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0145608, 0x0)

[ 1596.490892][ T3409] overlayfs: './file0' not a directory
10:41:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1000000000000000, 0x43400)

[ 1597.080858][ T3794] overlayfs: './file0' not a directory
10:41:39 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:39 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x6000000}]})

10:41:39 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x1000000})

10:41:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1100000000000000, 0x43400)

10:41:39 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:39 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0)

[ 1597.641510][   T28] kauditd_printk_skb: 29 callbacks suppressed
[ 1597.641529][   T28] audit: type=1804 audit(1581676899.869:1035): pid=3907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1664/bus/file0" dev="overlay" ino=16828 res=1
[ 1597.679809][ T3910] overlayfs: './file0' not a directory
[ 1597.771514][ T3913] overlayfs: './file0' not a directory
[ 1597.789683][   T28] audit: type=1804 audit(1581676899.919:1036): pid=3905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1789/bus/file0" dev="overlay" ino=16829 res=1
10:41:40 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x7000000}]})

10:41:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x2000000})

10:41:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0206434, 0x0)

10:41:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1200000000000000, 0x43400)

[ 1597.952849][   T28] audit: type=1804 audit(1581676899.949:1037): pid=3913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1911/bus/file0" dev="sda1" ino=16865 res=1
[ 1598.147126][   T28] audit: type=1804 audit(1581676899.959:1038): pid=3927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1664/bus/file0" dev="overlay" ino=16828 res=1
[ 1598.279390][   T28] audit: type=1804 audit(1581676900.509:1039): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1912/bus/file0" dev="sda1" ino=16826 res=1
10:41:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc020660b, 0x0)

10:41:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1300000000000000, 0x43400)

[ 1598.393139][   T28] audit: type=1804 audit(1581676900.529:1040): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1790/bus/file0" dev="overlay" ino=16829 res=1
[ 1598.547123][   T28] audit: type=1804 audit(1581676900.559:1041): pid=4226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1912/bus/bus/file0" dev="sda1" ino=16851 res=1
[ 1598.592486][   T28] audit: type=1804 audit(1581676900.559:1042): pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1665/bus/file0" dev="sda1" ino=16828 res=1
[ 1598.639408][   T28] audit: type=1804 audit(1581676900.599:1043): pid=4258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1665/bus/file0" dev="sda1" ino=16828 res=1
[ 1598.725853][   T28] audit: type=1804 audit(1581676900.949:1044): pid=4354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1913/bus/file0" dev="overlay" ino=16646 res=1
10:41:41 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x2], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:41 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x8000000}]})

10:41:41 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x3000000})

10:41:41 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0286405, 0x0)

10:41:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1400000000000000, 0x43400)

[ 1599.284843][ T4567] overlayfs: failed to resolve './file0': -2
10:41:41 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xfdfdffff}]})

10:41:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc028aa03, 0x0)

10:41:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1500000000000000, 0x43400)

10:41:41 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x4000000})

10:41:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1600000000000000, 0x43400)

10:41:42 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xff000000}]})

10:41:42 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x3], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:42 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x5000000})

10:41:42 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0406619, 0x0)

10:41:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1700000000000000, 0x43400)

10:41:42 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:42 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xfffffdfd}]})

10:41:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0585609, 0x0)

10:41:43 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x1000000000000}]})

10:41:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x6000000})

10:41:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1800000000000000, 0x43400)

10:41:43 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x100000000000000}]})

[ 1601.357671][ T5444] overlayfs: './file0' not a directory
10:41:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xfff3ffa7, 0x0)

[ 1601.790871][ T5697] overlayfs: './file0' not a directory
10:41:44 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x4], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1900000000000000, 0x43400)

10:41:44 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:44 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0xde, 0x99, @buffer={0x0, 0x5e, &(0x7f00000001c0)=""/94}, &(0x7f0000000300)="ef573d8b6d70b05fe13aee00eceed6e97513c34a112dce4c817af08497b5d70ed18c1232bf557efa78526d416c8f0b1493d0b073d5b4b5e8bc813afb6596abdad6c6177ec607228da72a7936baff48101ed61afebd91db3510922979c5632b386c1d5a6920089f42f6f22b6ed0039103b2343f623f239a39b9dd81fabf282191a7a4cdcfd024389e274c4c4f65469af5f40a2bc8e4e3954e218fc3dec5d4d780414c64476814a1bd26f0f86fb3dbc590cd7ebe34717550e859383909318ebe293c10287b10c6da68fdc7f25d3c0accb6c4e1d538478205ee23d6f061e692", &(0x7f0000000400)=""/187, 0x5f1c, 0x10001, 0x0, &(0x7f00000000c0)})
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:41:44 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x7000000})

10:41:44 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x200000000000000}]})

[ 1602.449975][ T5773] overlayfs: './file0' not a directory
10:41:44 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x300000000000000}]})

10:41:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1a00000000000000, 0x43400)

10:41:44 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c4d7765726469723d2e2f62757d8fb4b4122bad2cd3d1732c776f726b6469723f2e2f666c65312c757070657264"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x400})
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)

10:41:44 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x8000000})

[ 1602.930622][   T28] kauditd_printk_skb: 30 callbacks suppressed
[ 1602.930639][   T28] audit: type=1804 audit(1581676905.159:1075): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1673/bus/file0" dev="overlay" ino=16643 res=1
10:41:45 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x400000000000000}]})

[ 1603.057126][ T6026] overlayfs: unrecognized mount option "lMwerdir=./bu}�´´+­" or missing value
10:41:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1b00000000000000, 0x43400)

[ 1603.105010][   T28] audit: type=1804 audit(1581676905.239:1076): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1796/bus/file0" dev="overlay" ino=16739 res=1
[ 1603.264592][   T28] audit: type=1804 audit(1581676905.369:1077): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1920/bus/file0" dev="sda1" ino=16834 res=1
[ 1603.420864][ T6026] overlayfs: unrecognized mount option "lMwerdir=./bu}�´´+­" or missing value
[ 1603.474586][   T28] audit: type=1804 audit(1581676905.699:1078): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1674/bus/file0" dev="overlay" ino=16536 res=1
[ 1603.482284][ T6256] overlayfs: './file0' not a directory
[ 1603.553739][   T28] audit: type=1804 audit(1581676905.739:1079): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1674/bus/bus/file0" dev="overlay" ino=16576 res=1
10:41:46 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x5], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:46 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0xff000000})

10:41:46 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1c00000000000000, 0x43400)

10:41:46 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x500000000000000}]})

10:41:46 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x8000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x1f}, &(0x7f0000000340)=0x8)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./workdir=./file1,upperdir=./\x00\x00\x00\x00\x00\x00\x00\x00\x00'])
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00'})
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
listxattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)=""/59, 0x3b)
chroot(&(0x7f00000000c0)='./bus\x00')
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0x10, 0x0)

[ 1603.992570][ T6421] overlayfs: missing 'workdir'
[ 1604.048388][ T6424] overlayfs: failed to resolve './bus': -2
[ 1604.089657][ T6421] overlayfs: missing 'workdir'
[ 1604.093783][   T28] audit: type=1804 audit(1581676906.319:1080): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1675/bus/file0" dev="sda1" ino=16913 res=1
10:41:46 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x10a)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:41:46 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x100000000000000})

10:41:46 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x600000000000000}]})

[ 1604.232335][   T28] audit: type=1804 audit(1581676906.379:1081): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1675/bus/file0" dev="sda1" ino=16913 res=1
10:41:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1d00000000000000, 0x43400)

[ 1604.544644][   T28] audit: type=1804 audit(1581676906.769:1082): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1922/bus/file0" dev="overlay" ino=16851 res=1
10:41:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1e00000000000000, 0x43400)

10:41:46 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f696c65312c75707065726469703d2e2f66696c6530000000000000f9ffffffffffffff00df3d00"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000000c0)={0x6, 'wg1\x00', {0xbd}, 0x4})
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1604.643892][   T28] audit: type=1804 audit(1581676906.809:1083): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1676/bus/file0" dev="overlay" ino=16852 res=1
[ 1604.772179][   T28] audit: type=1804 audit(1581676906.839:1084): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1922/bus/bus/file0" dev="overlay" ino=16873 res=1
[ 1605.106053][ T7042] overlayfs: unrecognized mount option "loile1" or missing value
10:41:47 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x6], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:47 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x700000000000000}]})

10:41:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x200000000000000})

10:41:47 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x1f00000000000000, 0x43400)

10:41:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x300000000000000})

10:41:47 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x800000000000000}]})

10:41:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2000000000000000, 0x43400)

10:41:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x400000000000000})

10:41:48 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xfdfdffff00000000}]})

10:41:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2100000000000000, 0x43400)

10:41:48 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1606.340878][ T7495] overlayfs: './file0' not a directory
10:41:49 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:49 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0xff00000000000000}]})

10:41:49 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x500000000000000})

10:41:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2200000000000000, 0x43400)

10:41:49 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1607.474790][ T7880] overlayfs: './file0' not a directory
10:41:49 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x600000000000000})

10:41:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2300000000000000, 0x43400)

10:41:49 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1607.978028][   T28] kauditd_printk_skb: 13 callbacks suppressed
[ 1607.978046][   T28] audit: type=1804 audit(1581676910.209:1098): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1803/bus/file0" dev="overlay" ino=16770 res=1
10:41:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2400000000000000, 0x43400)

10:41:50 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x2}]})

[ 1608.133748][   T28] audit: type=1804 audit(1581676910.209:1099): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1681/bus/file0" dev="overlay" ino=16818 res=1
10:41:50 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x700000000000000})

[ 1608.302483][   T28] audit: type=1804 audit(1581676910.289:1100): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1681/bus/bus/file0" dev="overlay" ino=16855 res=1
[ 1608.650665][   T28] audit: type=1804 audit(1581676910.879:1101): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1682/bus/file0" dev="overlay" ino=16770 res=1
[ 1608.729726][ T8543] overlayfs: './file0' not a directory
10:41:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x800000000000000})

[ 1608.769509][   T28] audit: type=1804 audit(1581676910.999:1102): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1682/bus/bus/file0" dev="overlay" ino=16527 res=1
[ 1609.024891][   T28] audit: type=1804 audit(1581676911.249:1103): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1805/bus/file0" dev="overlay" ino=16596 res=1
10:41:51 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x8], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2500000000000000, 0x43400)

10:41:51 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:51 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x3}]})

10:41:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0xff00000000000000})

[ 1609.630147][   T28] audit: type=1804 audit(1581676911.859:1104): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1683/bus/file0" dev="sda1" ino=16770 res=1
10:41:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1609.757084][   T28] audit: type=1804 audit(1581676911.939:1105): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1683/bus/file0" dev="sda1" ino=16770 res=1
10:41:52 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x4}]})

10:41:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2600000000000000, 0x43400)

[ 1610.012375][   T28] audit: type=1804 audit(1581676912.239:1106): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1807/bus/file0" dev="overlay" ino=16590 res=1
10:41:52 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x2})

[ 1610.273285][   T28] audit: type=1804 audit(1581676912.499:1107): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1684/bus/file0" dev="overlay" ino=16707 res=1
10:41:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2700000000000000, 0x43400)

10:41:52 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x5}]})

10:41:52 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:53 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x11], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:53 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x3})

10:41:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2800000000000000, 0x43400)

10:41:53 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x6}]})

10:41:53 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:54 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x7}]})

10:41:54 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x4})

10:41:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2900000000000000, 0x43400)

10:41:54 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x8}]})

10:41:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2a00000000000000, 0x43400)

10:41:55 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x5})

[ 1612.995489][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 1612.995508][   T28] audit: type=1804 audit(1581676915.219:1117): pid=9855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1688/bus/file0" dev="overlay" ino=16872 res=1
[ 1613.325933][   T28] audit: type=1804 audit(1581676915.549:1118): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1811/bus/file0" dev="overlay" ino=16647 res=1
10:41:56 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x60], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:56 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x300}]})

10:41:56 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2b00000000000000, 0x43400)

10:41:56 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x6})

10:41:56 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1614.022639][   T28] audit: type=1804 audit(1581676916.249:1119): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1689/bus/file0" dev="overlay" ino=16908 res=1
10:41:56 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x7})

10:41:56 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x500}]})

10:41:56 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2c00000000000000, 0x43400)

10:41:56 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x8})

[ 1614.536438][   T28] audit: type=1804 audit(1581676916.769:1120): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1690/bus/file0" dev="overlay" ino=16710 res=1
[ 1614.559527][T10454] overlayfs: failed to resolve './file0': -2
10:41:56 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x600}]})

10:41:57 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2d00000000000000, 0x43400)

[ 1614.807844][   T28] audit: type=1804 audit(1581676917.039:1121): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1814/bus/file0" dev="overlay" ino=16578 res=1
10:41:57 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1615.138494][   T28] audit: type=1804 audit(1581676917.369:1122): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1691/bus/file0" dev="overlay" ino=16527 res=1
[ 1615.293331][   T28] audit: type=1804 audit(1581676917.439:1123): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1691/bus/bus/file0" dev="overlay" ino=16578 res=1
10:41:57 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:57 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x300})

10:41:57 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2e00000000000000, 0x43400)

10:41:57 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x700}]})

[ 1615.748504][   T28] audit: type=1804 audit(1581676917.979:1124): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1815/bus/file0" dev="overlay" ino=16710 res=1
10:41:58 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x500})

[ 1615.898634][   T28] audit: type=1804 audit(1581676918.019:1125): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1692/bus/file0" dev="overlay" ino=16711 res=1
10:41:58 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0xff00}]})

10:41:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x2f00000000000000, 0x43400)

10:41:58 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1616.049676][   T28] audit: type=1804 audit(1581676918.099:1126): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1692/bus/file0" dev="overlay" ino=16711 res=1
10:41:58 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x1000000}]})

10:41:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3000000000000000, 0x43400)

10:41:58 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x600})

10:41:59 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x2], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:41:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3100000000000000, 0x43400)

[ 1617.120201][T11772] overlayfs: './file0' not a directory
10:41:59 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x700})

10:41:59 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x2000000}]})

10:41:59 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:41:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3200000000000000, 0x43400)

10:42:00 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x3000000}]})

10:42:00 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0xff00})

10:42:00 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3300000000000000, 0x43400)

[ 1618.258219][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 1618.258237][   T28] audit: type=1804 audit(1581676920.489:1136): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1819/bus/file0" dev="overlay" ino=16664 res=1
10:42:00 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1618.363472][   T28] audit: type=1804 audit(1581676920.569:1137): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1696/bus/file0" dev="overlay" ino=16693 res=1
10:42:00 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x4000000}]})

[ 1618.474108][   T28] audit: type=1804 audit(1581676920.649:1138): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1696/bus/file0" dev="overlay" ino=16693 res=1
10:42:00 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1618.693561][   T28] audit: type=1804 audit(1581676920.919:1139): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1820/bus/file0" dev="overlay" ino=16578 res=1
[ 1618.868312][   T28] audit: type=1804 audit(1581676921.099:1140): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1697/bus/file0" dev="overlay" ino=16753 res=1
10:42:01 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x3], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3400000000000000, 0x43400)

10:42:01 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x2})

10:42:01 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x5000000}]})

[ 1619.500104][   T28] audit: type=1804 audit(1581676921.729:1141): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1698/bus/file0" dev="overlay" ino=16690 res=1
10:42:01 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x6000000}]})

[ 1619.597303][   T28] audit: type=1804 audit(1581676921.799:1142): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1821/bus/file0" dev="overlay" ino=16708 res=1
10:42:01 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x3})

10:42:02 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3500000000000000, 0x43400)

10:42:02 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1620.006666][   T28] audit: type=1804 audit(1581676922.239:1143): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1699/bus/file0" dev="overlay" ino=16653 res=1
10:42:02 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x7000000}]})

[ 1620.142599][   T28] audit: type=1804 audit(1581676922.299:1144): pid=12832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1699/bus/file0" dev="overlay" ino=16653 res=1
10:42:02 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3600000000000000, 0x43400)

[ 1620.296390][   T28] audit: type=1804 audit(1581676922.459:1145): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1822/bus/file0" dev="overlay" ino=16788 res=1
10:42:02 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x4})

[ 1620.588576][T13038] overlayfs: './file0' not a directory
10:42:02 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x8000000}]})

10:42:03 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3700000000000000, 0x43400)

10:42:03 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4800000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:03 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0xfdfdffff}]})

10:42:03 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r5, 0x0, r3, 0x0, 0x10000, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000000c0)={0x0, <r6=>0x0, 0x7ff})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r9 = accept$alg(r8, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r9, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r9, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r9, 0x0, r7, 0x0, 0x10000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={r6, 0x0, r7})
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r10 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r10, 0x10, 0x0)

10:42:03 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x5})

10:42:04 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x6})

10:42:04 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0xff000000}]})

10:42:04 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3800000000000000, 0x43400)

10:42:04 executing program 2:
mkdir(&(0x7f0000000240)='./bus\x00', 0x1a1)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c16e9a765312c75707065726469723d2e2f66696c6530fa2ad0cf00d1a95c1deb9d2ef575160577d7695c14d9c2753ca456be01b2c6530c783f3bb915d041c5099a241424d29108b7ba3ac3bf"])
chdir(&(0x7f0000002680)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002540)={0x3, 0x7fff, {}, {<r4=>0xee01}, 0x1ff, 0x2})
setxattr$security_capability(&(0x7f00000024c0)='./file2\x00', &(0x7f0000002500)='security.capability\x00', &(0x7f0000002580)=@v3={0x3000000, [{0x8, 0x9}, {0x1000, 0x3}], r4}, 0x18, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000017c0)=0xe8)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
recvfrom$unix(r0, &(0x7f00000025c0)=""/34, 0x22, 0x40, &(0x7f0000002600)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
setuid(r9)
syz_mount_image$erofs(&(0x7f00000000c0)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x6, &(0x7f0000001600)=[{&(0x7f0000000140)="4d2b67780437a3beb2b88195af82", 0xe, 0xfffffffffffffffc}, {&(0x7f0000000300)="f21fad9045c09b174749f1be4a6e2a71547bf7c71d4b0eddc104f84b68131d60fcdacaba3962bc251abaf374b3f2d03deabf68d9c48b9fab338d1aaac5db32293dd25fafaa921ac08347af81aaa79b2ec9a232a6b37d39812834737dfcad072078e78da9bd94dd9cc28019ee14b7d92f4da04dfd8ed419ce90d20d0715636a1db93dcac68dcb657d2062998d4c183bd85364e02f407592b57f91f8e759a5b78e8db26cc0ff33d10237d3d42b304ea295eb95d1d3652925abcae85a6141cc0b62c829c0c49265d173", 0xc8, 0xffffffff}, {&(0x7f0000000400)="7933eb29c365974a2f3f6dd5920ef146e3c8e63da8b396fe2d7611a82347921b70d42d04a3b41a5347be6780030b2d073676de244a7759740a2d57ff88b38afb78d62bdb616fcba1e40a9f89887a1f9b07a625a42684bfe8a545f611f416684e4b50c5d038890170916b09010389a0682a4a65a9c84bc35ad1cbd4f0764ef5dc84b7c403cf2f1c7b256a2b5b4a7318b9bbd5101c0443d79bd36709b567671f8f85cf65d9d765493ec059bf1bb16963c5aa15ffc5cf31a7c4b9b28b69f8dabee696eed981cca1c280f7c6f3e46952936e3b2fd1ca3df26ab3ec1ab27c3e42812b90fc29", 0xe3, 0x4}, {&(0x7f0000000500)="f324d34d35276bbc7e537c5b7d04678640f981a385798fb7d25861d29ed7c9e47e331b4cd5d8cd208ab2c33360c11aff403f7eef2bdce411be5c53ad2a6e67898aeb6a988425712fd6e0caf6c0929382777d6260adbe48ec5b4cf7db80102f45f11750b59e7b95b4cd91b6d6beae20c9b5a511b7abb93590305a185eac16c7b3129584df8ddfa93244f62ff2fe0fbdbd", 0x90, 0x1}, {&(0x7f00000005c0)="e2ccfb594ae177656ce3b4", 0xb, 0xe07}, {&(0x7f0000000600)="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", 0x1000, 0x9}], 0x800000, &(0x7f0000002800)=ANY=[@ANYBLOB='nouser_xattr,noacl,noacl,acl,nouser_xattr,hash,smackfsroot=overlay\x00,obj_user=overlay\x00,euid>', @ANYRESDEC=r5, @ANYBLOB="2c666f776e65723cf6d4c779cd2124", @ANYRESDEC=r7, @ANYBLOB="3be881c667275a757c9d80252a702597136b9659d32a17d9b0a6f8bc1de9fc294ffa362b7439b64313bcc1f26b415b5b212fbe91a4515d28fcfe29556817af5d88149a4493107d98573dcc75587b98cf5638366026fd5e2a0ccf000077e2296aaeeaa3ae226686b34db8a62111be", @ANYRESDEC=r9, @ANYBLOB=',smackfshat=,audit,rootcontext=unconfined_u,\x00'])
r10 = getpid()
sched_setscheduler(r10, 0x5, &(0x7f0000000380))
waitid(0x2, r10, &(0x7f00000026c0), 0x1000000, &(0x7f0000002740))

10:42:04 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x7})

10:42:04 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0xfffffdfd}]})

[ 1622.680482][T13792] overlayfs: failed to resolve './file0ú*ÐÏ': -2
[ 1622.902404][T13795] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock
10:42:05 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x5], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3900000000000000, 0x43400)

10:42:05 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:05 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x8})

10:42:05 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:42:05 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f773d59da6275732c776f726b6469723d2e2f66696c76312c75707065726469723d2e2f66696c65300000000000ee65402c245b6f19deba49b79c21300d8dd33a726cb04c23fedacc47dbd27c4f8f45cc4585cf7832232db4ce511cdedbc53980c5a9bf76f61b60bd95c6b4de701ca97bda2037372208fc3ea4660d33082fe6767126267d87c902a3af9f9b44d6cd8638fde5acb3aa3b1fa9daa0e0"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1623.188916][T14010] overlayfs: unrecognized mount option "low=YÚbus" or missing value
[ 1623.278255][   T28] kauditd_printk_skb: 18 callbacks suppressed
[ 1623.278280][   T28] audit: type=1804 audit(1581676925.509:1164): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1705/bus/file0" dev="overlay" ino=16802 res=1
10:42:05 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62757361fb2af16b6469723d2c2f66696c65312c74707065726469723d2e2f66696c6530"])
mknod(&(0x7f0000000140)='./file0\x00', 0x80, 0xc0)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x1330dfd5a1b6557b, 0x80)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:05 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x2}]})

10:42:05 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x300})

10:42:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3a00000000000000, 0x43400)

[ 1623.550728][T14224] overlayfs: unrecognized mount option "/file1" or missing value
10:42:06 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
mkdir(&(0x7f00000000c0)='./file2\x00', 0x180)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1623.786277][   T28] audit: type=1804 audit(1581676926.019:1165): pid=14232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1706/bus/file0" dev="overlay" ino=16677 res=1
[ 1623.848253][T14232] overlayfs: './file0' not a directory
[ 1623.875382][   T28] audit: type=1804 audit(1581676926.049:1166): pid=14235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1828/bus/file0" dev="overlay" ino=16552 res=1
10:42:06 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x3}]})

[ 1624.023701][   T28] audit: type=1804 audit(1581676926.249:1167): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1928/bus/file0" dev="overlay" ino=16867 res=1
[ 1624.296212][   T28] audit: type=1804 audit(1581676926.519:1168): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1707/bus/file0" dev="overlay" ino=16524 res=1
[ 1624.387962][   T28] audit: type=1804 audit(1581676926.599:1169): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1707/bus/bus/file0" dev="overlay" ino=16561 res=1
10:42:07 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x6], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:07 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x500})

10:42:07 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:07 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3b00000000000000, 0x43400)

10:42:07 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x110)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
fstat(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x7}, [{0x2, 0x5, r1}, {0x2, 0x0, r3}], {0x4, 0x4}, [{0x8, 0x7, r5}], {}, {0x20, 0x2}}, 0x3c, 0x6)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r6 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8)
r8 = getgid()
lchown(&(0x7f00000000c0)='./file1\x00', r7, r8)
r9 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r9, 0x10, 0x0)

10:42:07 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x4}]})

[ 1624.957752][   T28] audit: type=1804 audit(1581676927.189:1170): pid=14558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1829/bus/file0" dev="overlay" ino=16911 res=1
10:42:07 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r5, 0x0, r3, 0x0, 0x10000, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x7, 0x5, 0x4, 0x4000000, 0xfffffffe, {0x77359400}, {0x2, 0x0, 0xae, 0x7, 0x7f, 0x1, "f32fc59f"}, 0x2ef, 0x3, @planes=&(0x7f00000000c0)={0x9, 0x4, @fd=r3, 0x8}, 0x1f, 0x0, <r6=>0xffffffffffffffff})
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x204800, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f00000003c0)={0x3, 0x3, {0x56, 0x9, 0x1, {0x5, 0x1}, {0x0, 0x3}, @ramp={0x7d3, 0x1b7, {0xffff, 0x40, 0x3}}}, {0x56, 0x0, 0x7ff, {0xff55, 0x5}, {0x4, 0x7}, @rumble={0x4, 0xf5}}})
move_mount(r6, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x5)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r8, 0x10, 0x0)

[ 1625.052181][   T28] audit: type=1804 audit(1581676927.239:1171): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1708/bus/file0" dev="overlay" ino=16695 res=1
10:42:07 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x5}]})

10:42:07 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x600})

10:42:07 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3c00000000000000, 0x43400)

[ 1625.235965][   T28] audit: type=1804 audit(1581676927.279:1172): pid=14597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1708/bus/bus/file0" dev="overlay" ino=16926 res=1
[ 1625.571525][   T28] audit: type=1804 audit(1581676927.799:1173): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1830/bus/file0" dev="overlay" ino=16836 res=1
[ 1625.667173][T14677] overlayfs: './file0' not a directory
10:42:07 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x6}]})

10:42:08 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x700})

10:42:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x7], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:08 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6800000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3d00000000000000, 0x43400)

10:42:08 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469733d2e2f66696c65312c75707065726469723d2e2f66696c6530d6f6e170b4311d6d9e1965f4337215e1d2bfae52ab7cc05793b2d37d07bb237d67789d15fa3f0981f05475c9c300e62bf85818c589efbb721c14c0be457834d701d99e459ab062fe2e676918f9da506721b3ba52139956a09c0a9452fd0e0770041cb8448947e6b44c97f09f9e99174094692344359ebf92e84e12d70ec53f6241efc78e4981c7977ba439ff7dc222c4104c7b6e6a6b6fb9949982a39961222920b8970ac46c9da9575e54de0f1fca"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file1\x00')
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0xc02, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [<r5=>0x0]}, &(0x7f0000a8a000)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x14, &(0x7f00000015c0)={r5}, &(0x7f0000001600)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x3, 0x1, 0x8a1, 0x80000000, r5}, 0x10)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:08 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x7}]})

10:42:08 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0xff00})

[ 1626.662517][T15109] overlayfs: unrecognized mount option "workdis=./file1" or missing value
10:42:09 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x8}]})

10:42:09 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:09 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3e00000000000000, 0x43400)

10:42:09 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275b05485ba070c88970a732c774c726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1627.250720][T15363] overlayfs: failed to resolve './file0': -2
[ 1627.257839][T15351] overlayfs: unrecognized mount option "wLrkdir=./file1" or missing value
10:42:09 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x300}]})

10:42:09 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x3f00000000000000, 0x43400)

[ 1627.351803][T15433] overlayfs: unrecognized mount option "wLrkdir=./file1" or missing value
[ 1627.735616][T15554] overlayfs: './file0' not a directory
10:42:10 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x8], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:10 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus\x00', 0x64984eb3f831b4fa)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62010000000000000069723d2e2f66696c65312c75707065866469723d2e2f66696c6530"])
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x5)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r4, 0x0, r2, 0x0, 0x10000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@rand_addr="00e7873f7800", 0x43, r5})
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:10 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:10 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x2})

10:42:10 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x4000000000000000, 0x43400)

10:42:10 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x500}]})

[ 1628.124772][T15759] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1628.257617][T15850] overlayfs: './file0' not a directory
10:42:10 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x3})

10:42:10 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x600}]})

[ 1628.297856][T15779] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
10:42:10 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x4300000000000000, 0x43400)

[ 1628.396846][   T28] kauditd_printk_skb: 17 callbacks suppressed
[ 1628.396862][   T28] audit: type=1804 audit(1581676930.629:1191): pid=15759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1933/bus/bus/file0" dev="sda1" ino=16944 res=1
10:42:10 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdirI/bus,workdir=./file1,upperdir=./file0\x00'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1628.727060][   T28] audit: type=1804 audit(1581676930.959:1192): pid=15974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1835/bus/file0" dev="overlay" ino=16791 res=1
[ 1628.797669][T15982] overlayfs: unrecognized mount option "lowerdirI/bus" or missing value
[ 1628.833840][   T28] audit: type=1804 audit(1581676931.029:1193): pid=15977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1715/bus/file0" dev="overlay" ino=16886 res=1
10:42:11 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x4})

10:42:11 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x700}]})

[ 1628.991636][   T28] audit: type=1804 audit(1581676931.059:1194): pid=15982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1934/bus/file0" dev="sda1" ino=16952 res=1
[ 1629.101831][   T28] audit: type=1804 audit(1581676931.119:1195): pid=16077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1715/bus/bus/file0" dev="overlay" ino=16951 res=1
[ 1629.294946][   T28] audit: type=1804 audit(1581676931.119:1196): pid=16053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1715/bus/bus/file0" dev="overlay" ino=16951 res=1
[ 1629.302864][T16195] overlayfs: './file0' not a directory
[ 1629.331639][   T28] audit: type=1804 audit(1581676931.139:1197): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1934/bus/bus/file0" dev="sda1" ino=16955 res=1
[ 1629.387180][   T28] audit: type=1804 audit(1581676931.499:1198): pid=16193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1836/bus/file0" dev="overlay" ino=16578 res=1
[ 1629.433746][   T28] audit: type=1804 audit(1581676931.519:1199): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1716/bus/file0" dev="overlay" ino=16676 res=1
[ 1629.467683][   T28] audit: type=1804 audit(1581676931.589:1200): pid=16299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1716/bus/bus/file0" dev="overlay" ino=16740 res=1
10:42:12 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x11], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x140)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0x10, 0x0)

10:42:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x4400000000000000, 0x43400)

10:42:12 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7400000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:12 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x5})

10:42:12 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0xff00}]})

[ 1630.127521][T16412] overlayfs: './file0' not a directory
10:42:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0x8000000000000000, 0x43400)

10:42:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
sendto$netrom(r0, &(0x7f00000000c0)="e67bee6a8b", 0x5, 0x4008805, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0x10, 0x0)

10:42:12 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x1000000}]})

10:42:12 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x6})

10:42:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xe0ffffffffffffff, 0x43400)

10:42:13 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x60], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:13 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x2000000}]})

10:42:13 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file1\x00', 0x80100, 0x100)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:13 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x7})

10:42:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xf0ffffffffffffff, 0x43400)

[ 1631.467159][T17053] overlayfs: failed to resolve './file0': -2
10:42:13 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x3000000}]})

10:42:13 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x8})

10:42:13 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c7570706572a28bab0e2eed8c000400000000b3271adb6c3af12c66d37197261fd28140bb58e48e7db4660c8dcf9a1078d34e8253db054531fc278d114b5467274105a359d7dc457c8d824012e3b0b21362f1940c2e8183a3ae72703c28b475510f9565dd34e2834c3ad3e8e54e99c2ce3ba0dff56b8a16c3e30b48291ce384d085be4eeffdb441"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
socket$l2tp(0x2, 0x2, 0x73)

10:42:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xf4ffffff00000000, 0x43400)

[ 1631.892096][T17272] overlayfs: unrecognized mount option "upper¢‹«.íŒ" or missing value
10:42:14 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1631.974887][T17272] overlayfs: unrecognized mount option "upper¢‹«.íŒ" or missing value
10:42:14 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x4000000}]})

10:42:14 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./file1\x00', 0xc5)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c2f6275732c776f726b6469723d2e19fb5b3c607fbae248178992df2f66696c65312c757070a074a683767860be7d2351b5a4c665a920aa66b7e53b695599f607d76e31812e883c28e2cc4bda50e02f7da9c42fb9abd79d50b7fcb359884b8580a8cc0c47ca49d8d50398848d26bdeca9306c77174666d75919836a14c6067ed8a531b12eaa6f12d5d58607edbfd10ed7bf35185af28fd0d5359fb3c3d4ae2ee404ebfa28"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1632.439579][T17489] overlayfs: './file0' not a directory
10:42:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfbffffff00000000, 0x43400)

10:42:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200))
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x0, &(0x7f00000000c0)})

10:42:15 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x300})

10:42:15 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x5000000}]})

10:42:15 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x97ffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:15 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x6000000}]})

10:42:15 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x500})

[ 1633.434366][   T28] kauditd_printk_skb: 23 callbacks suppressed
[ 1633.434385][   T28] audit: type=1804 audit(1581676935.659:1224): pid=17653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1940/bus/file0" dev="overlay" ino=17020 res=1
10:42:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfeffffff00000000, 0x43400)

10:42:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1633.837982][   T28] audit: type=1804 audit(1581676936.069:1225): pid=17826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1723/bus/file0" dev="overlay" ino=16616 res=1
10:42:16 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x7000000}]})

[ 1633.943065][   T28] audit: type=1804 audit(1581676936.089:1226): pid=17830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1842/bus/file0" dev="overlay" ino=16850 res=1
10:42:16 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x600})

[ 1634.061107][   T28] audit: type=1804 audit(1581676936.129:1227): pid=17917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1723/bus/bus/file0" dev="overlay" ino=16933 res=1
[ 1634.149561][   T28] audit: type=1804 audit(1581676936.129:1228): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1723/bus/bus/file0" dev="overlay" ino=16933 res=1
[ 1634.359774][   T28] audit: type=1804 audit(1581676936.239:1229): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1941/bus/file0" dev="overlay" ino=17058 res=1
[ 1634.402043][   T28] audit: type=1804 audit(1581676936.289:1230): pid=18034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1941/bus/bus/file0" dev="overlay" ino=16592 res=1
[ 1634.432688][   T28] audit: type=1804 audit(1581676936.619:1231): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1843/bus/file0" dev="overlay" ino=16592 res=1
[ 1634.449463][T18042] overlayfs: failed to resolve './file0': -2
[ 1634.463316][   T28] audit: type=1804 audit(1581676936.649:1232): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1724/bus/file0" dev="overlay" ino=16616 res=1
10:42:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xff0f000000000000, 0x43400)

10:42:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clock_adjtime(0x1, &(0x7f00000003c0)={0x9, 0x6, 0x7, 0x1, 0x4, 0x3f, 0x0, 0x20, 0x25, 0x1, 0x0, 0x3, 0xffffffffffffffe1, 0x9, 0x8, 0x2, 0x1f, 0x3, 0xa085, 0x9, 0x1, 0x1, 0x10001, 0x5, 0x101, 0x3})
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0', @ANYBLOB="79306514d18d79c1b713bcaa5f298207d509c7979049613ddbb3880e3a1c79f9cdc1d07ceff8520de33152274660573ebbb317cd7c5dc76d902d50d67e8d3e20fe05fbd9e02fcab7cdaa93086f6e76f7c5562cbbe09c"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:17 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xbc10000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:17 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x700})

10:42:17 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:17 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0x8000000}]})

[ 1634.967751][   T28] audit: type=1804 audit(1581676937.199:1233): pid=18254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1844/bus/file0" dev="overlay" ino=16913 res=1
[ 1635.044038][T18262] overlayfs: unrecognized mount option "»àœ" or missing value
10:42:17 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xff00})

10:42:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xffffffff00000000, 0x43400)

[ 1635.173492][T18465] overlayfs: unrecognized mount option "»àœ" or missing value
10:42:17 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0xfdfdffff}]})

10:42:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f776572e469723d2e2f6275732c776f726b6452723d2e2f00000000000000077065726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:17 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x1000000})

[ 1635.578493][T18512] overlayfs: unrecognized mount option "loweräir=./bus" or missing value
10:42:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xffffffffffffffe0, 0x43400)

[ 1635.690901][T18512] overlayfs: unrecognized mount option "loweräir=./bus" or missing value
10:42:18 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
lgetxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)=@random={'btrfs.', 'cpusetem1\x00'}, &(0x7f0000000300)=""/4096, 0x1000)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x24042, 0x0)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000140)={0x8057, 0x2})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
prctl$PR_SET_TSC(0x1a, 0x0)
listen(r2, 0x5)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4)
syz_open_dev$vcsa(0x0, 0x0, 0x10000)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x2400, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r5, 0x10, 0x0)

10:42:18 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0xff000000}]})

10:42:18 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xfffffffffffffff0, 0x43400)

[ 1636.427225][T18772] overlayfs: './file0' not a directory
10:42:19 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:19 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x2000000})

10:42:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x105000, 0x0)
sendto$unix(r0, &(0x7f0000000380)="2a471bfb16fcb99f2045b2947e759ece6e6eb458cfd968f8f82af99d0c6047761ca0bdff37ffe06d07d327b53909fc050dbf6be39068a8eb22f6f1de336008cf49e7aa8878e87b8ee18f30ac01dbf20d909d3ec42e1348a79782fb26faf8543bc9c559e115454d744998a430e5faf76041837f5eee1574a1a21a9512c174399e0c57edfb9eace6fad03600eea70e9f9004ae1f65693c1371e13511649f3f6771e022c74a2ea80e5ccf17ab4e5a282410f145cd3bce5ae79d36a6f63e9a492dc76ea1160b1dd2dca95f351932b0296d6568c01b166bc1", 0xd6, 0x10, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000140)='./file1\x00', 0x351d80, 0x131)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x2080, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:19 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{{}, 0x0, 0x0, 0x0, 0xfffffdfd}]})

10:42:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200)=0xffffffffffffffff, 0x43400)

10:42:19 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfcfdffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1637.291438][T19118] overlayfs: filesystem on './file0' not supported as upperdir
10:42:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6c6f7765726469523d5ef48ddc955b95c6723d2e2f66696c65312c75700000000069723d2e300000000027d57992da69a266fb397ae1"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x1, [<r6=>0x0]}, &(0x7f0000a8a000)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x14, &(0x7f00000015c0)={r6}, &(0x7f0000001600)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={<r7=>r6, 0xde, "ba40b1e68319419e8108963e42e77245e5baff8874c3ba6ddbaacf8e8519c31de2fc91be60c2183f22a42d26994f97601461174e3b0e47a5d2b3516550967eaf94099bb7f16336ec994f8b1d36e38b411c93f21e3024e1d76933e7c7c812df2c4f211541f42347ecfd0a1652618fad4282afbb51f1612f1f6ed87cdf547fc16a169334ad3af04638019b9a9a2cf149dfd0103663b55750ff53606529af3564ac4c35c871965242b3982ffd1dfe7fe17c8872a73829df9a32d5bb51aefbff3e1f5dcb2c81ffad7f98b03f4db965368e5c07ab22c25f7c67f6b8460bfae5e9"}, &(0x7f00000000c0)=0xe6)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xe000, 0x101, 0x8002, 0xffe00000, 0x1c, 0x5c9, 0x7fffffff, 0x0, r7}, &(0x7f00000001c0)=0x20)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r8, 0x10, 0x0)

10:42:19 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x130)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={<r4=>r3})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x58, r6, 0x2468825185d9173d, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="dd6071e90625"}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="45763816233e"}, @NL80211_ATTR_MAC={0x4, 0x6, @link_local}, @NL80211_ATTR_WDEV={0xc}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x67}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000844)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:42:19 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x3000000})

10:42:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x2000)

[ 1637.815577][T19339] overlayfs: unrecognized mount option "lowerdiR=^ô�Ü•[•Ær=./file1" or missing value
[ 1637.990942][T19338] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
10:42:20 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x4000000})

10:42:20 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x3000)

10:42:21 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:21 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r5 = dup2(r2, r4)
socket$isdn_base(0x22, 0x3, 0x0)
dup3(r5, r3, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
unshare(0x8000400)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc42, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8478071")
lseek(r6, 0x0, 0x3)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f77b1e96a0ecf325efee2adf2b0657264691cadf1567add723d7233dc846150a644726b6469723d2e2f66796c65312c75707065726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r8, 0x10, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r11 = accept$alg(r10, 0x0, 0x0)
sendmsg$alg(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r11, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r11, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r11, 0x0, r9, 0x0, 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9)

10:42:21 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c2e2f6275732c776f726b6400723d2e2f66696c65312c7570706572646949828778e6c03fa930b7a0be740c5b61da5a84654944167a870bd72c2b0b3a37cb1e79c9a48be1fbdfebce7c9e743c8e52477a9cf517acf428f62389d3e833485e76a52d282e81c7acb948d2786fa1a38f71c8972998d8534931efa9288e3ee4c80a92c0732a0ee83ebfe82531ee39464ada6aba27c0d6a63fd821c373f51618"])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x4800, 0x12e)
r1 = socket$inet(0x15, 0x5, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000480)=""/220)
r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x1b0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r4 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r5 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0xff}, 0x8)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, 0x0, [{{r3}, 0x1}, {{r4}, 0x2}, {{}, 0xf4}, {{r0}, 0x4}]})

10:42:21 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdfdffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:21 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4000)

10:42:21 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x5000000})

[ 1639.011501][T19870] overlayfs: unrecognized mount option "l./bus" or missing value
[ 1639.072723][   T28] kauditd_printk_skb: 20 callbacks suppressed
[ 1639.072740][   T28] audit: type=1804 audit(1581676941.299:1254): pid=19872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1850/bus/file0" dev="overlay" ino=17050 res=1
[ 1639.109623][T19874] overlayfs: unrecognized mount option "low±éjÏ2^þâ­ò°erdi­ñVzÝr=r3Ü„aP¦Drkdir=./fyle1" or missing value
[ 1639.189011][   T28] audit: type=1804 audit(1581676941.319:1255): pid=19870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1730/bus/file0" dev="sda1" ino=17051 res=1
10:42:21 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x6000000})

10:42:21 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000580)={0x2, "2f464771f31375ac2f0d2f66a0c1709a1f9ab5e7b77f494090e5313c5e0afed7"})
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nvram\x00', 0x2000, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000b00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)={0x418, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65a9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x401, @rand_addr="10f16b7d2d0865b7d32b9a93779e63b3", 0x2a}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0xff}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x911d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44cd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4890f543}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x459}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x431e25d9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x202d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc467}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
clone3(&(0x7f0000000340)={0x81924400, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)=<r7=>0x0, {0x1}, &(0x7f0000000400)=""/244, 0xf4, &(0x7f0000000200)=""/7, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x4}, 0x50)
capget(&(0x7f0000000500)={0x20071026, r7}, &(0x7f0000000540)={0x4, 0x1, 0x81, 0x5, 0x0, 0x52f5839f})

10:42:21 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x5000)

[ 1639.327152][   T28] audit: type=1804 audit(1581676941.379:1256): pid=19874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1947/bus/file0" dev="sda1" ino=17068 res=1
[ 1639.472094][   T28] audit: type=1800 audit(1581676941.399:1257): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17051 res=0
[ 1639.564832][   T28] audit: type=1804 audit(1581676941.419:1258): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1730/bus/file0" dev="sda1" ino=17051 res=1
[ 1639.728187][   T28] audit: type=1804 audit(1581676941.959:1259): pid=20178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1947/bus/bus/file0" dev="sda1" ino=16565 res=1
10:42:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x6000)

10:42:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f7769723d2e2f6275852c776f726b6469723d2e2f66876c65312c75707065726469723d2e2f66696c65306e78cb06203f4edae550af7fe51230d98c41b1c904000000c86f244ad095628d569f577daafdf1336db2366b0713c158a65939ddfab703f62571a5d616368e42eceb8b3ca13d24fc0378ffff929bc1f71f2d4b795ca160916e42b67586264fb149bec03a24e130e836bcde36b323a01a7d55b5439da10fa08dffd43b0f75c9d59ae7e5e11d5583e0f1138206f67896d51a0000000013b491b67b17f65a25b607c894aeff2d4ab92163622bbe9d25d25fc03bbe0b32ee6bcc82e17b7c16179ba1a107617029ef0afbe3cb7dd799d224d0663815f4a9e3934cc94219209c7aec32f71d732a3d6541200100000000000000f4245666e20d9baf71817cae9c613fca0ff4d11aff6fbee240e8ccc0b985ff4cb3114389ee3c132af3a1a715ec637d4ed8722bab672d171f46cd2583c8011b01d62ba8b1"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1639.841521][T20119] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure
[ 1639.856344][   T28] audit: type=1804 audit(1581676941.969:1260): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1731/bus/file0" dev="overlay" ino=16662 res=1
10:42:22 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1640.071211][T20084] overlayfs: './file0' not a directory
[ 1640.111496][T20397] overlayfs: unrecognized mount option "lowir=./bu…" or missing value
[ 1640.192121][   T28] audit: type=1804 audit(1581676942.419:1261): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1731/bus/bus/file0" dev="overlay" ino=16523 res=1
10:42:22 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:22 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x7000000})

10:42:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x7000)

10:42:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bu=./file1,r=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={0x1})
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002600)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x2, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:22 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r2 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r4 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYPTR64, @ANYBLOB="9ed64254747d3351a84b577c48db958273758a78e74cb4e651bba3297e190f9ae7de657590410ec62a2a9296a4ffbdbdb2c9a2aab1fc20eb3c259ee1e88d4ee783a83dffaaf7215f4c1227d93b63fa1cf6c574ce407fb17372159a0e7c5dc5e024371bcc1b76c4a652eaabe8b7d371105d93f94e6d3e3c9ecad4dd20cf89bc4db946e758a97d600cf1e78015b200425acc39246808e0708af5278da6de2e1f", @ANYRES16=r4, @ANYRES32]]], @ANYRESOCT, @ANYRES16=r0, @ANYBLOB="8bc88fe41eb8cd5f8e875b54d1fab946eabfee7ae1dd3df4d83bf255f79d07480155a71936dc05a47fa50161786d67b4bb877ff43c37302119147310c18f202e5b14c3119284dc9472af8cc47d9f99f0f5dd0f79462455483ea0563e99658781dfadc95aa3fee0bc7cc7643c8ac32b1f1681468efe99dad8f69c12d15052b3a5ea2c2a7b340b97865775f10054f3b697e5e822a3f9766c4cf5507847ebac8f8ac67b27b8af189486f317fb908c9c21521e0265f5450c6a8c177094ea32975a147ae3"]])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1640.437594][   T28] audit: type=1804 audit(1581676942.669:1262): pid=20505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1852/bus/file0" dev="overlay" ino=16757 res=1
[ 1640.555133][T20527] overlayfs: unrecognized mount option "r=./file0" or missing value
[ 1640.644409][   T28] audit: type=1804 audit(1581676942.869:1263): pid=20527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1949/bus/file0" dev="sda1" ino=16520 res=1
10:42:22 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x8000000})

10:42:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x9000)

[ 1640.791787][T20717] overlayfs: missing 'lowerdir'
10:42:23 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
accept4$unix(r0, 0x0, &(0x7f00000000c0), 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:42:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0xa000)

10:42:23 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:23 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x1344ed, &(0x7f0000000100)=ANY=[])
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4000, 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:23 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xff000000})

10:42:24 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0xb000)

10:42:24 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
accept$inet6(r0, 0x0, &(0x7f0000001a40))
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
statx(0xffffffffffffff9c, &(0x7f0000001880)='./file0\x00', 0x4000, 0x7ff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x8, &(0x7f00000017c0)=[{&(0x7f0000000300)="f6b593b6640880bb55f55c5378ce8712d9401a01a06a1a7b5be6122a4f1f5a663492f5c230b2f418d6d1fbc80808e8f0e1792a4d836e01bd1b7fd40fb31451c6a0a6626d7738bdcdf12970ded0bd9bbf60b4a9a6ee0b99ae740e2ae0924017a275e4a965b0f84b63430949f755465616b9731ea1b026a19fb9f3c004e124235b0187ef2322f5c25e90da0127dde4ae2e61cb913e0f8073e5f6bfb282aa996ee404942113070b9a660b", 0xa9, 0x4}, {&(0x7f00000001c0)="2fdf07c700474b1fb47ec6e966c660c596fb67febdb5f2df204383721bc1e79c7f44bddb88b08c619a621a6b37ada8df38e24a0a57557d7b259e6adcb06c70d90caca5b37d489dd8587dbab1038af73d75226ef29f793ad09d20b1a70522420e7b1a86faee7afd299fe841269591ee23", 0x70}, {&(0x7f00000003c0)="58e19d0651f96bb964407b83eae68619d62572806d4a85b78452214439425589002dd96115f880d50a4ca0f3157fbac2ab0a0553637f78d38722de03821919b600db8b2d70aeb8c4e0a391e5809059aad28f76afc489aad0539609054235bb0ab46cb5e67caf4e8becc3b7fb31bb7d4115b8371d7cd6b0b92636ca95a0d445f5827d3b917d1326c0a244ab85df3a891dbb7946bede", 0x95}, {&(0x7f0000000480)="eacbfdf29e51b98baefd4dfd121ad2387ba2c6c2ecee349d612ad18cdd13f2be14c7ad1854df3214cfa3c868e8eb7ebea5c47c41a41a5a78dde3cb3e1ba43da0735df0335f644ac452c650c45144e271e12ef89e00073ebb75a84df9ad0bb4f7981cbc00acb254a5d7d81ba51a66ce8819906cef79a15aeb4703365293aa33bd0d7c8df02bc4539490e771e43d51a3b85c03e9039fb6f11305806d29ccc0df56571eff7617a06758cc31078aacc83ddfa4ed349512e6edb67d90091ef87299541632857281a48b3fb8cd729ab1ccc05789b03679263341c59a", 0xd9, 0xffff}, {&(0x7f0000000580)="794a333e2816ee3a726f1adbe07084ab6ef36990a81c24be2bc83586ee1036d886ed61c4c33e1424981665292f1d89106c9cac9212bd6dd221a9ff990af55b70642552c7ef5c7a46d900eda9a430ce953a930e1392b4be6911ad6c7d0c92c5b05ee34cebe8f88570403b", 0x6a, 0xffffffffffff7fff}, {&(0x7f0000000600)="2a342b1827155b4dabe02e9720d8bf438ab1d73790e979f1c98f8048a81d9b0fccbfdc8580fadefdb1d9df6e0de714170c369cb3740f5f3f4fe63b56196648a87f05981adfaf5a5fc09558d53db9a1bf67981828c27ba4e746d945d21c281500e28ded5e202a18713b50fdb8828c77afed3fb0e94a6e5f74f6833b9c4c5b97f325f88a3d84f6ecd310fa99de3a37a6009556bd1a670b61cb863ba42d2c255538928c96660dfa92f8de62899e626ecef5be19cbdc830b6cc76c6ea19083587dd87388c8bef5ebad6e2f7252441b200961788f6dbc5d0e6cb6943bb0d9b2", 0xdd, 0xfb53}, {&(0x7f0000000700)="3f4505138bbc114aa40fc8e529b3f11702eccc4ece1a5d93aac63a851cf74dead396d09eae4861a069d8327816392f2d862683f4590cc6f3e1ecdba8c36dfd6bb0de562e60fcfdcd239c62a5ed68e65cbb569d5cb0b1016e90e91968f28fb49cdfc3442b8978ca936dd1cce8df30f33cd0a1c350743ec0df7bdd4165216f8759dfdef601d2c9da6aa5ba6608033a91e7f955e06aa7fb2ed19b3443e63cdd18923104ffc88c7720eb87b5e0fb21c1488f8c6cfd82e2d9ee", 0xb7, 0x8}, {&(0x7f00000007c0)="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", 0x1000, 0x3}], 0x2000000, &(0x7f00000019c0)={[{@part={'part', 0x3d, 0x1}}, {@uid={'uid', 0x3d, r4}}, {@dir_umask={'dir_umask', 0x3d, 0x38}}], [{@euid_gt={'euid>', r5}}, {@context={'context', 0x3d, 'system_u'}}]})
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r6, 0x10, 0x0)

10:42:24 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c66696c65312c7570706572643000100000000000000000"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000140)='./bus\x00', 0x185100, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$void(r3, 0xc0040c29)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r4, 0x0, r1, 0x0, 0x10000, 0x0)
fdatasync(0xffffffffffffffff)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)

10:42:24 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r4, 0x0, r2, 0x0, 0x10000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8)
mount$9p_xen(&(0x7f00000000c0)='syz\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=xen,afid=0x0000000000000401,posixacl,nodevmap,msize=0x0000000000000000,dfltuid=', @ANYRESHEX=r1, @ANYBLOB=',uname=*,cache=fscache,acW+ss=any,measure,fowner=', @ANYRESDEC=r5, @ANYBLOB=',subj_user=,fsname=\x00,\x00'])
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723e2e6f91e6b2795f577c6833810f4e2f6275732c776f726b646972"])
chdir(&(0x7f00000002c0)='./bus\x00')
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000300)=0xffffff7e, 0x4)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:24 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1642.248266][T21262] overlayfs: unrecognized mount option "file1" or missing value
10:42:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0xc000)

10:42:24 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x0, 0x0, [{}]})

[ 1642.513501][T21269] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
10:42:24 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x521802, 0x0)
write$rfkill(r0, &(0x7f0000000140)={0x100, 0x3, 0x2}, 0x8)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000000000000000000000000000000000000000002"])

10:42:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000002380)=""/4107, 0x100b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8)
r4 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000006c0)=0xe8)
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f0000000300)="600d4f9ddb0c7c02438d358736496860f904a91d99e44ef1fdd728712a5705553eedfeb080ec3b9549719825bdafe68f1d9c28f06dfd9956cc32293017fecaefd2a1d4f33787b78a81461b0c0a2a532d624bd07c430fe0c1b4d95be41c8f353b497430cfd1c1658e8c1a9980fdc24ee82b47ac41df7cfce2a49dc6988ead3bcd0586f13e1307362fcb1baa490cfe41eab64ffd660da1abadc8b847d02fe764e1bf1f7a9df8dc4103167e7464f946b321e00d92882b91b85dafe6bbc85b952c09a3bd47bd", 0xc4, 0x9}, {&(0x7f0000000400)="06253ea3e7b7b95922902526a3371a2b21ee0df8c66762ce79f5920dddb180d934699e8ec655c9533f32ef63999372bd29c9895b70ec625eebd835fd22567045c6cb60cc85edfe3c0c905cbbd630ba509eacfcaec1f5ecef138e154a4504c3eedffec4bf2c39442a7ecde62f1c7a482d3485b05238", 0x75, 0x1f}], 0x9104c0, &(0x7f0000000700)={[{@logdev={'logdev', 0x3d, './bus'}}, {@pqnoenforce='pqnoenforce'}, {@pquota='pquota'}, {@dax='dax'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_lt={'fowner<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}, {@audit='audit'}]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f776572648f72aff32f6275733d2e2f66696c65312c75707065726469723d2e139e696c67300000000000000000"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x9, 0x203)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r6, 0x10, 0x0)

10:42:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0xd000)

10:42:25 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c77312c75707065726469723d2e2f6669ffe430888e220e82cd65807331d38caba75c251521c384a7c1a865230dcf79247260cf0759d846d2e9f4ac6a84607d3805110f7226c4de834c2955f630"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1643.254449][T21791] overlayfs: unrecognized mount option "lowerd�r¯ó/bus=./file1" or missing value
[ 1643.324477][T21796] overlayfs: unrecognized mount option "w1" or missing value
[ 1643.364386][T21797] overlayfs: unrecognized mount option "lowerd�r¯ó/bus=./file1" or missing value
[ 1643.375455][T21796] overlayfs: unrecognized mount option "w1" or missing value
10:42:25 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:25 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x20000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000300)="d16947983f6d410aa01f3ecc706b038eb3b5ce2539df495b27a8b2baf5bf9431789c3f5b3f842ef3572bc1161fe79453ed6812ed1ac8d0e51201fa8ce8bab21e9b6113bd9980fe8e2b093c3dedb5619c25e085c9a7224fb703ad6820ee5ddd55420c7cc004fe48a7fdc379bfcf41cc13d3c325c70ca9c6093de5b37098c04f03b2f1fc6f6c17036d36fc957b417dcc0f405206d24b30", &(0x7f0000000400)="2caca8231aec7a3cd00c023da8523546861e431d513ed72ead7e08359c67317ddbfaf588c2ffa53a9dcb8225d3cf811d3b176354166f275460d43bc0ca55d74fe75eb4c6ae3652cac543753934af9c09019830a5fdab5ed70c3b61b20d657480aa8590f633f419934acb746cdc54ce426920172c173615ee2da4a61b89a7ea53ebaf805f260d422d9fa59b33ce"}, 0x20)

10:42:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0xe000)

10:42:26 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:26 executing program 0:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x881, 0x0)
unlinkat(r0, &(0x7f0000000280)='./bus\x00', 0x200)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x301002, 0x260)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000300)='./file1\x00', 0x17f)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75faec00006469723d2e2f6605000000ac8bad11c24b842b8441076e44649527da7988815585ad3a48193c7ad0d22955ab0c1039a547d51996c9b6b509e2cc00bb970692547f1b418360486e8a107b9f0c558a99f71c1f5fdcdfac100c26d2b4b54c4b146fb24fb2c0eb6570762e910b7c2621954547ca1bd378bbe618e04a3289b62f73943c74762be26bbc670be98997bfc19d95033eb07d4db363dc8d3defb835b930524eb19d3ba473f9d9ecc3cce2a47eea7f6281acd890d625fa83f37e087dac84284ffa10534daade1c8f04b2cd32e4ae224499b250e36f761b6708d452569b"])
chdir(&(0x7f0000000200)='./file1\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x5)
write$P9_ROPEN(r1, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0x81, 0x2, 0x4}, 0xffffff80}}, 0x18)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0004cc8d12e7000000"])
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, <r4=>0x0})
syz_open_procfs(r4, &(0x7f0000000340)='net/ip6_tables_matches\x00')

10:42:26 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x741043, 0x76)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1643.867129][T21921] overlayfs: unrecognized mount option "uúì" or missing value
[ 1643.971287][T22012] overlayfs: filesystem on './file0' not supported as upperdir
10:42:26 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1644.016699][T22077] overlayfs: unrecognized mount option "uúì" or missing value
10:42:26 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="6c6f772ebc6469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65308f01206e01bd46ba426f72e1f2d3c9e4a006bafd801725988cc20e5cc3ee5d185408887610f2bf7a7c4902006efdfc11bbf24072f4c87aa035"])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
syz_mount_image$exfat(&(0x7f00000000c0)='exfat\x00', &(0x7f0000000140)='./file1\x00', 0x6, 0x6, &(0x7f00000015c0)=[{&(0x7f00000001c0)="05e9f89fab724791db2696a62c8235bfe258c8482f03fed71f4876c2bf4442", 0x1f}, {&(0x7f0000000300)="4f975174e5560e7519635ccce292eab71a78ab0a98b386c1e78567ae45889bd501332507267319d80b6488049428f412b31ddcad543fb6b3702b5279b36b963d3f3faf2262053c0d95a1c8735ba1c72b79055476be6d17a355488f0bad777ac50643ef7ff8d939630f4a62f68e1fb8f0a6e4856d992799f10546eea2fa9abbfc0286be692085b468333ebb5eb9e304a7523af32fa414f3c5a587ed8ef4a7e39e12a0bd7fceb5cb389c160bbe6f8c1ad7ceeaefca1673299959985f59bd33a1687a50d8f73bcadf8f67977717ed2fb77b57d679150d1e3d429addea49f990", 0xde, 0x101}, {&(0x7f0000000400)="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", 0x1000, 0xb79}, {&(0x7f0000001400)="874b1d3579fac80e41671cdba0815dc8ea4417e8fc668ca2d092d721a56db590a98c09d8861874337eff1db37d4c6670ae0f919c23820018ff91defe1b11f2d513974751743ecf04ffd24dfc6cfe6e7ba1a6ef", 0x53, 0x7ff}, {&(0x7f0000001480)="186e5ad6dda773c4530db4e1f436fdeb5e09b3d4b81c482d031a05da18fa88b5c3824706dff762f7fdc3f9f0155fe622aca54297ee999f4d9165c0df116e375eaff368f3f067891027284388ae20cb345a463b589c8a940cb8db3ef64209d4e8c9ecd61e4d2af9d0a3cf1d81fe", 0x6d, 0x6}, {&(0x7f0000001500)="16af3659737fe8ae5c53a76e76e3511c97f74c6a91ec9686ad7cea48d3611553cd815362a8f4b5cc4b73957a5fcd4693b9882e39f983e2ae8f4f62127d1c9ea769fe536a0bd74435338022f38965c071166f53eb2f3821ead5566b474e64dde72dcfac7b791f65d15bc4a06d64192ab6b8e5e1bac2b7cbd73583d834315040effcda637041d53ac1e99fab1152dce4cb5f27fafabb907efbcb267f84160d3c2623d5f1c37ad1c7e6e2", 0xa9, 0x9}], 0x201801, &(0x7f00000017c0)={[{@fmask={'fmask'}}, {@errors_continue='errors=continue'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x3, 0x37, 0x66, 0x31, 0x30, 0x3, 0x67, 0x61], 0x2d, [0x66, 0x61, 0x63, 0x33], 0x2d, [0x37, 0x34, 0x37, 0x30], 0x2d, [0x62, 0x64, 0x31, 0x62], 0x2d, [0x61, 0x64, 0x61, 0x0, 0x31, 0x39, 0x34, 0x38]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '^vboxnet0['}}]})
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0x10, 0x0)

10:42:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)

10:42:26 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x6, [{0x6, 0x6}, {0xfffffffd, 0xff}, {0x8, 0x400}, {0x333, 0x3}, {0x10001, 0x9}, {0x5c, 0x9}]}})
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="00014e1c5800000080000000000000003e0000000000000096e9d6f654fdffffff757b70c430e8a43ab3c55030ab9fccf0be0805000000700f", @ANYRES32, @ANYBLOB='\x00'/28])
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000300)={0x80000000, 0x14, [0x2c0, 0x4, 0x8001, 0x2, 0x7]})

[ 1644.414779][   T28] kauditd_printk_skb: 14 callbacks suppressed
[ 1644.414795][   T28] audit: type=1804 audit(1581676946.639:1278): pid=22134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1858/bus/file0" dev="overlay" ino=16675 res=1
[ 1644.525414][T22199] overlayfs: unrecognized mount option "low.¼dir=./bus" or missing value
10:42:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x11000)

[ 1644.573581][   T28] audit: type=1804 audit(1581676946.769:1279): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1738/bus/file0" dev="sda1" ino=16883 res=1
10:42:26 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000340)={0x3b, @loopback, 0x4e23, 0x3, 'sed\x00', 0x2, 0x1f, 0x5}, 0x2c)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000140)=0xfff)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0))
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000000000015cc388a50931bf302659553677b4000"/39])

[ 1644.663802][   T28] audit: type=1804 audit(1581676946.889:1280): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1738/bus/file0" dev="sda1" ino=16883 res=1
[ 1645.099659][   T28] audit: type=1804 audit(1581676947.329:1281): pid=22433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1859/bus/file0" dev="overlay" ino=16689 res=1
10:42:27 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:27 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:27 executing program 0:
mkdir(&(0x7f0000000240)='./bus\x00', 0x193)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x58, r2, 0x2468825185d9173d, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="dd6071e90625"}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="45763816233e"}, @NL80211_ATTR_MAC={0x4, 0x6, @link_local}, @NL80211_ATTR_WDEV={0xc}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048804)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:42:27 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x900, 0x0)
bind$isdn_base(r0, &(0x7f0000000140)={0x22, 0xb7, 0x7f, 0x9, 0xb1}, 0x6)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x19e)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f72500c69723d2e5fa29dda87a113c59b172f66690165312c7551a465726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x12000)

10:42:27 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000380)=@md5={0x1, "b7e6c68741ecab635821fa1adbc9534f"}, 0x11, 0x1)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x5, 0x800)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
sync()
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x3, 0x0, 0x1, 0x0, 0x0, [{{}, 0x20}]})

[ 1645.678484][T22677] tmpfs: Bad value for 'size'
[ 1645.686810][T22672] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[ 1645.688748][T22672] overlayfs: failed to resolve './file1': -2
[ 1645.745721][   T28] audit: type=1804 audit(1581676947.969:1282): pid=22672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1739/bus/file0" dev="sda1" ino=16834 res=1
[ 1645.782931][T22677] tmpfs: Bad value for 'size'
[ 1645.808513][   T28] audit: type=1804 audit(1581676948.029:1283): pid=22675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1860/bus/file0" dev="overlay" ino=16850 res=1
[ 1645.867907][T22688] overlayfs: './file0' not a directory
10:42:28 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:28 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65f5857eba3edfe64d2703f64151fc312c75707065726469723d2e2f66696c6530"])
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
sendto(r0, &(0x7f00000001c0)="1ef1442904051b803ecc33de9722f551ebb498d7f716412893ec1568ca6f2f9c29920ee7b0a4644ea92fa6d9ea9f8d1223d8440a4ab27e3d21668105010e12a7216e672634f3cd4b9048f4cbcb80a3d6992d30083ddaf296ffc97e59ec610fdb96bd094b46b4", 0x66, 0x2004a800, &(0x7f0000000b80)=@caif=@rfm={0x25, 0x9, "6a964bd0f4ff1a8b67ce26969b944b63"}, 0x80)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xd4, 0x2, 0x5, 0x7, 0x7, 0x2, 0x3, 0x1, 0x17, 0x38, 0x3bb, 0x6, 0xfff, 0x20, 0x1, 0x7, 0x1f, 0x1ff}, [{0x6474e551, 0x8001, 0x0, 0x4, 0x6, 0x800, 0x2, 0xffffff00}], "2fd2d1f155eecc4ccf5d0dbd13676081e4630d162d4340af286cba2d548b37c1a8afe9192a01cda7c0a6fbf8b46a095b2621c96078d70ff56d823788470f3644", [[], [], [], [], [], [], [], []]}, 0x898)
getxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000c00)=@known='system.posix_acl_access\x00', &(0x7f0000000c40)=""/134, 0x86)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x13000)

10:42:28 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'batadv0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}})

[ 1646.099946][   T28] audit: type=1804 audit(1581676948.169:1284): pid=22672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1739/bus/bus/file0" dev="sda1" ino=16867 res=1
[ 1646.131585][T22892] tmpfs: Bad value for 'size'
[ 1646.231661][T22892] tmpfs: Bad value for 'size'
[ 1646.265119][T22902] overlayfs: failed to resolve './fileõ…~º>ßæM'öAQü1': -2
10:42:28 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x14000)

[ 1646.309984][   T28] audit: type=1804 audit(1581676948.539:1285): pid=22902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1956/file1/file0" dev="sda1" ino=16771 res=1
[ 1646.389635][T22685] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[ 1646.469095][T23011] tmpfs: Bad value for 'size'
[ 1646.548638][T23011] tmpfs: Bad value for 'size'
[ 1646.714748][   T28] audit: type=1804 audit(1581676948.939:1286): pid=23049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1861/bus/file0" dev="overlay" ino=16650 res=1
10:42:29 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x11], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:29 executing program 3:
mkdir(&(0x7f0000000240)='./file0\x00', 0xb2)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x58, r3, 0x2468825185d9173d, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="dd6071e90625"}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="45763816233e"}, @NL80211_ATTR_MAC={0x4, 0x6, @link_local}, @NL80211_ATTR_WDEV={0xc}]}, 0x58}}, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001880)={@rand_addr, @broadcast, <r4=>0x0}, &(0x7f00000018c0)=0xc)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x14)
syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x204000)

10:42:29 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)='\x00', 0x1, 0x2)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:29 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:29 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x15000)

[ 1647.619245][T23332] overlayfs: failed to resolve './file1': -2
[ 1647.650893][T23338] tmpfs: Bad value for 'size'
[ 1647.667902][   T28] audit: type=1804 audit(1581676949.899:1287): pid=23332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1862/bus/file0" dev="sda1" ino=16758 res=1
[ 1647.678668][T23332] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
10:42:30 executing program 3:
mkdir(&(0x7f00000000c0)='./file1\x00', 0x98)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c653097b023c30589da62862ea20485d919a8463809eb0232293f4e3d251c22dc16e97b614dfb8857fe04a78bcbb7932ace111e9b16fe02757ad6532d53d4f120da463cdefff9e4f2db394744f694136bd9c134e159bce39e32eec1ab0c30e77a5f42e3120db9ae6b29a068a2957ed11cb342be4ee8653103e296640b0bcfe848212091639dd4738c3e1abf9061af"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1647.763901][T23338] tmpfs: Bad value for 'size'
[ 1647.765561][T23334] overlayfs: failed to resolve './bus': -2
10:42:30 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1647.910866][T23452] tmpfs: Bad value for 'size'
[ 1647.921492][T23453] overlayfs: failed to resolve './file0—°#ÉÚb†.¢…Ù¨F8	ë2)?N=%"Üé{aMûˆWþ§‹Ë·“*ΛþuzÖS-SÔñ ÚF<ÞÿùäòÛ9GDö”kÙÁ4áY¼ãž2îÁ«0çz_Bã
¹®k) h¢•~ѳB¾Nèe1â–dÏèH! ‘c�ÔsŒ>¿�a¯': -2
[ 1648.035470][T23452] tmpfs: Bad value for 'size'
10:42:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x16000)

10:42:30 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1648.329144][T23665] tmpfs: Bad value for 'size'
[ 1648.368413][T23665] tmpfs: Bad value for 'size'
10:42:30 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x17000)

[ 1648.562318][T23775] tmpfs: Bad value for 'size'
[ 1648.672341][T23775] tmpfs: Bad value for 'size'
10:42:31 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1648.872736][T23987] tmpfs: Bad value for 'size'
[ 1648.972193][T23987] tmpfs: Bad value for 'size'
10:42:31 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x60], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x18000)

10:42:31 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x1e4201, 0x144)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r2 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r4 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r5 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r6 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r7 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1ff, 0xc20c2)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r10 = accept$alg(r9, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r10, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r10, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r10, 0x0, r8, 0x0, 0x10000, 0x0)
setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000480)=0x3f, 0x4)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r13 = accept$alg(r12, 0x0, 0x0)
sendmsg$alg(r13, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r13, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r13, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r13, 0x0, r11, 0x0, 0x10000, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r11, 0xc02064a4, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000300)=[0x9, 0x3, 0x83a7, 0x80], &(0x7f0000000340)=[0x7ff, 0xfffd], &(0x7f0000000380)=[0x9f]})
r14 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x835a, 0x8000)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0x0, 0x0, [{{r14}, 0x6}, {{r7}, 0x843}, {{r1}, 0x800}]})

10:42:31 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:31 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2cb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = semget$private(0x0, 0x2000000010a, 0x0)
semop(r1, &(0x7f0000000000)=[{0x2, 0x0, 0x1000}, {0x0, 0xffffffff}], 0x2)
semop(r1, &(0x7f0000000000)=[{0x0, 0x480}, {0x0, 0x4, 0x1400}], 0x2)
semop(r1, &(0x7f0000002fc0)=[{0x3, 0x400, 0x1000}, {0x0, 0x7f17}], 0x2)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f627573ac776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0xce)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000003000))
ioctl$FIDEDUPERANGE(r2, 0x10, 0x0)

[ 1649.659126][T24009] tmpfs: Bad value for 'size'
[ 1649.742845][T24009] tmpfs: Bad value for 'size'
[ 1649.754745][T24014] overlayfs: missing 'workdir'
[ 1649.805399][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 1649.805424][   T28] audit: type=1804 audit(1581676952.029:1291): pid=24014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1958/bus/file0" dev="sda1" ino=17054 res=1
10:42:32 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1649.857903][T24018] overlayfs: missing 'workdir'
10:42:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x19000)

[ 1649.950495][   T28] audit: type=1804 audit(1581676952.149:1292): pid=24014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1958/bus/bus/file0" dev="sda1" ino=17064 res=1
10:42:32 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@timestamp], 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x2)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000200)=0x80000001, 0x4)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000000c0)='overlay\x00', 0x8)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r7, 0x10, 0x0)

[ 1650.065504][T24222] tmpfs: Bad value for 'size'
10:42:32 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='f2fs\x00', 0x80000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000200)={0x2f, 0x1})
chdir(&(0x7f00000002c0)='./bus\x00')
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1650.212655][T24222] tmpfs: Bad value for 'size'
10:42:32 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1650.431541][   T28] audit: type=1804 audit(1581676952.659:1293): pid=24307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1959/bus/file0" dev="overlay" ino=16596 res=1
[ 1650.494546][T24340] tmpfs: Bad value for 'size'
10:42:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x1a000)

[ 1650.579220][T24340] tmpfs: Bad value for 'size'
[ 1650.622548][   T28] audit: type=1804 audit(1581676952.849:1294): pid=24307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1959/bus/file0" dev="overlay" ino=16596 res=1
10:42:32 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x48, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1650.870342][T24455] tmpfs: Bad value for 'size'
[ 1650.932569][T24455] tmpfs: Bad value for 'size'
10:42:33 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x1b000)

10:42:33 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
io_uring_setup(0x21c, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2, 0x227})

10:42:33 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x1}}, 0x10)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:33 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4c, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1651.676616][T24681] tmpfs: Bad value for 'size'
[ 1651.735628][   T28] audit: type=1804 audit(1581676953.959:1295): pid=24677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1960/bus/file0" dev="overlay" ino=16770 res=1
[ 1651.789560][T24681] tmpfs: Bad value for 'size'
[ 1651.806714][   T28] audit: type=1804 audit(1581676953.969:1296): pid=24679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1866/bus/file0" dev="overlay" ino=16555 res=1
10:42:34 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x60, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1651.901439][   T28] audit: type=1804 audit(1581676954.129:1297): pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1960/bus/file0" dev="overlay" ino=16770 res=1
10:42:34 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir%./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:34 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x8, "3d1e5ee31ccb363ebf21a3ef9b3925aa"}, 0x12, 0x1)

10:42:34 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x1c000)

10:42:34 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x68, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1652.268775][T24900] overlayfs: unrecognized mount option "workdir%./file1" or missing value
10:42:34 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2eebfc696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:34 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x1d000)

[ 1652.788718][   T28] audit: type=1804 audit(1581676955.019:1298): pid=25115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1961/bus/file0" dev="overlay" ino=16602 res=1
[ 1652.945194][   T28] audit: type=1804 audit(1581676955.059:1299): pid=25186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1961/bus/file0" dev="overlay" ino=16602 res=1
10:42:36 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x2, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:36 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6c, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:36 executing program 2:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00')
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000480)={0x4, 0xa, 0x4, 0x1000, 0x1, {0x0, 0x7530}, {0x2, 0x0, 0x0, 0x9, 0xca, 0x3, "cbc9f82e"}, 0x96a6, 0x4, @planes=&(0x7f00000000c0)={0x0, 0x3, @fd, 0x2}, 0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000140)=0x2)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6c6f7765726469723d2f6275732c776f726b6469723d59f81e2e65312c75707065726469723d2e2f66696c6530007876f92083d42cf58495f6b85b287752740698aba1b5562be3bb48072025d1dc5cbdcf2f60e0a0e3392b2777dd69c9f58800e367e33aa39726d90f9d39323a692e15dc42b49413daee0cf9f2d42aa0af5f52049af76c2051279a79b895b30e0eb377d6541da31737b148a8627c0f875d6366335040e747e2b6a4e90b3f0599b8081a2ced93a931aff82ce46fa2d410b68c856bcaa4a0b309d5"])
chdir(&(0x7f0000000400)='./file0\x00')
symlink(&(0x7f0000000440)='./file1\x00', &(0x7f00000002c0)='./file0\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x2)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:36 executing program 3:
mkdir(&(0x7f0000000400)='./file1\x00', 0x4)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x101], 0x1, 0x80000, 0x0, r1})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b64b76d6d4a9dddef8665312c7570706572646972072e2f66696c6530"])
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400, 0x1)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000003c0)={0x3})
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000300), 0x4)

10:42:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x1e000)

[ 1653.861699][T25439] overlayfs: failed to resolve 'Yø.e1': -2
[ 1653.913796][T25443] overlayfs: unrecognized mount option "workd·mmJ�Ýï†e1" or missing value
[ 1653.942123][   T28] audit: type=1804 audit(1581676956.169:1300): pid=25439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1962/file0/file1" dev="sda1" ino=16851 res=1
[ 1653.988466][T25439] overlayfs: './file0' not a directory
10:42:36 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x74, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:36 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000001ac0)='./bus/../file0\x00', 0x380802, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
readlinkat(0xffffffffffffffff, &(0x7f0000001a00)='./file2/file0\x00', &(0x7f0000001a40)=""/45, 0x2d)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r4, 0x0, r2, 0x0, 0x10000, 0x0)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000001a80), &(0x7f0000001b00)=0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0, <r5=>0x0}, &(0x7f0000001940)=0xc)
syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file2\x00', 0x2, 0xa, &(0x7f0000001800)=[{&(0x7f0000000400)="b65b6ca1be5b9665740de304294399a1ee952f9d0b61509838d64d3ac66920b6773e55b95f55250c03d9aee2e356aea446242bf84a87483f20a32181aab3f2b38c486ba89f296fc8a54205ea1ef72c66e788f57f6a248477d767441b27e20a619d38e70a140dcc3fdd5ecbd016c6557342da6e791dcedd9753257e53fd74bc267d02f2c5b2a38a992d2ff398f0eeca368628e60435ca07027ab497633d775751f299058d357c1046072853f65bf3eca07c928b57f877da04ba3ca0563a52b14d8fb29b56651e03ef58414ab1ee85012616e7b2c9f38fce53c433fa280bdd40234d040ab150763e79342359438d761d3512abb4", 0xf3, 0x3}, {&(0x7f00000001c0)="0568948eaadbec57f62ba22eeb1886add75f695d6ec5d378f2bf5baa9c493fab4a1671fd03786779089bc17fa112ccf3382e0df33e500309792f5c781c8a168f85631c0c1e15be8b2850ed601b29cc67ffa8869985", 0x55, 0x2}, {&(0x7f0000000300)="414e4abd8b840b19f353c2771e", 0xd, 0x9}, {&(0x7f0000000340)="52fbdf266026b8c4f7ed05e58647faa438b58c9b981dfef15f597ea669d9c357f749388730dec4b8a7830071b0a23aef73f4f33f4d938d97a2c462be0bcf046938c39aa0f66b745967b2f63cf1", 0x4d, 0x9}, {&(0x7f0000000500)="65cd032643c2a4796c908a48564fee44f4e3f1e8327e4128347fad00feece716a59e6f2292d10b03065798bb8f4b5ae57d43307e56a60c5fc87f92625c9bed16bdef37c132f5c8fe99f7db75a6b9f60f02fcdf8322bed916ace171e3d43ff868238812c3b3adb19bccc6f90658e7d0a9e67021e81426229b647a1e947c05ddab5478e7dc8e886b2c2b7523c664a1fd7eba74d4c950bbe3d6e45cda699bdeb2a28c3b816af16a7ba072b65b2dc2b4c7a4bbe2e8f1152a147f44ade275881964ffdcd7640d7e57432bf28921a8871c0c3b40df422aeaa9e1c6e58a7de5d9a1fd2b3bbd26306047ad", 0xe7, 0x81}, {&(0x7f0000000600)="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", 0x1000, 0x9}, {&(0x7f0000001600)="a295ded77b9da167b2adde439c2ea9e8bafb1526ea25ac015d0bf1b39a81bad68bdd8e0fdc080a4b38305b92f870aa7a0b9ee28b9a8d9699ee7c466952f6bb6082d69a45e9e0", 0x46, 0x9e1}, {&(0x7f0000001680)="d307c47c6be10dd5166c3792dbfe6ad2bda52064eb207d1a8b5f3e7e5284231f98ee89cebd817d6d71d1e27cb9e62cf2e713b55ba4f7d622055e6ed485a8a7e37f8c2b21f8c6ad41f2eeaaa75aff587c789607236db0fb91e4cbf56ef06713282c4a351b382cdca69ded7f0345541ad121ac06197d68499c59830e9b46edb5b753dd5cb7278f34a489e9bba4875c14f6a45719437054f2da53de468699925373098693210727bf856725cea1872e97223c3d0f4df35633d2a93b6c7a0076b7a18b449d6452fd9fa71129b83c9cb70b0b74167d190a199710ff0d298d7b3fdc", 0xdf, 0x3f}, {&(0x7f0000001780)="c9cd7c5bf6e08cdede379d76d0c601f0b261f1", 0x13, 0x1}, {&(0x7f00000017c0)="c27b183e343bb8810840b08c8732aac252bd2d7351bdf7e5bcef4f39763c", 0x1e, 0x3}], 0x1088036, &(0x7f0000001980)=ANY=[@ANYBLOB="6d4b71e3ab2bb916f24a7961703d", @ANYRESHEX=r5, @ANYBLOB=',block=0x0000000000000000,rootcontext=sysadm_u,\x00'])
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:36 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d292f66696c65312c7570700a1cdb1e0746fc8b66696c65309907bd6948b4579bc8fc1b337621036025d05e5fec68755d4c1b60a7aa8a233e57c8fc08a54738a96c1304d78c4b1e2fb16d382df58180fa75f4a8b12703000000000000007adc011e0eec18ae8745cc11b5d0ce53674a9801a08db138a59c3d0dea65f245da8140ebc5d72aa528b23d33c1c6c4a57203bc56414ed1dd254e117d65dc"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x1f000)

10:42:36 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7a, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1654.430798][T25674] overlayfs: unrecognized mount option "upp
[ 1654.430798][T25674] ÛFü‹file0™½iH´W›Èü3v!`%Ð^_ìhu]L`§ªŠ#>WÈü¥G8©l׌K/±m8-õ�€úuô¨±'" or missing value
10:42:36 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530c4e0883729e5fa87aa76bae7640b79d93a39850af4d450f86141e24d9708be"])
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
signalfd4(r0, &(0x7f0000000340)={[0x5]}, 0x8, 0x80c00)
chdir(&(0x7f0000000440)='./file1\x00')
setxattr$trusted_overlay_origin(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x10081, 0x22)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:36 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x2002000, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1654.875103][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 1654.875121][   T28] audit: type=1804 audit(1581676957.099:1305): pid=25884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1964/bus/file0" dev="sda1" ino=17069 res=1
[ 1655.100779][T25890] overlayfs: failed to resolve './file0Äàˆ7)åú‡ªvºçdyÙ:9…
[ 1655.100779][T25890] ôÔPøaAâM—¾': -2
10:42:37 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x3, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x20000)

10:42:37 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f6401762f6c6f6f703000b135a92a2c98e5cf033754603e6b5518edc807fb90d059837103e251ed3c5a69e50e54b54d2afc796b5b6ecfbb6a9f9106f558b8c344679893737bd1fcb76df07930f683eae68024"], &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='aio\x00', 0x64808, &(0x7f0000000200)='overlay\x00')
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7772726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c7570702cd36469723d2e2f66696c653000412d01b8b1490280"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:37 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="bd734e34726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530f4f7849bc22db321f9595f0856191514f3ae0a0936455dce1010caed50e04021f65976d8"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x82)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:37 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1655.662780][T26104] overlayfs: unrecognized mount option "½sN4rdir=./bus" or missing value
[ 1655.684420][T26109] overlayfs: unrecognized mount option "lowrrdir=./bus" or missing value
[ 1655.745820][T26111] tmpfs: Bad value for 'size'
[ 1655.818368][T26111] tmpfs: Bad value for 'size'
[ 1655.856733][   T28] audit: type=1804 audit(1581676958.089:1306): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1965/bus/file0" dev="sda1" ino=16945 res=1
[ 1655.922321][T26266] overlayfs: unrecognized mount option "lowrrdir=./bus" or missing value
10:42:38 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x21000)

[ 1655.991404][   T28] audit: type=1804 audit(1581676958.219:1307): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1965/bus/bus/file0" dev="sda1" ino=16993 res=1
10:42:38 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x5, 0x1]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.ofile1,upperdir=*/file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:38 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0x10, 0x0)

[ 1656.176378][T26322] tmpfs: Bad value for 'size'
[ 1656.264365][T26322] tmpfs: Bad value for 'size'
[ 1656.313360][T26327] overlayfs: failed to resolve '*/file0': -2
10:42:38 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1656.464864][T26394] overlayfs: failed to resolve './bus': -2
10:42:38 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./ir=./file0\x00'/47])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
lsetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)='overlay\x00', 0x8, 0x3)
openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
close(r1)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1656.575124][T26638] tmpfs: Bad value for 'size'
10:42:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x22000)

[ 1656.698990][T26638] tmpfs: Bad value for 'size'
[ 1656.743525][T26647] overlayfs: option "workdir=./ir=./file0" is useless in a non-upper mount, ignore
[ 1656.765978][T26647] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1656.803376][   T28] audit: type=1804 audit(1581676959.029:1308): pid=26647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1874/bus/file0" dev="sda1" ino=17037 res=1
10:42:39 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x4, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:39 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='loerdir=./bus,workdir=./file1,upperdir=./file0\x00'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200441, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000070a01010000000000000000030000000900000000797a31000000000c0006400000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0xc010)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:39 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x23000)

10:42:39 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f627573320c00006b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6730df15551319b10373828a355da85310b65848c81c4b198dc7e59321e75cb0e7e474bd15e583f989c5bb5a61d9b37c27ccd47b56030000b60d1efb55ea28bdd52871cfbbc7f8d49455ec31b867060f60c93ca91ccc1464c0ca82a909d7775719f54d91f3ebb12179bd419dd378dbc6643425d7c8"])
chdir(&(0x7f00000002c0)='./bus\x00')
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz1\x00', {0x0, 0x1ff, 0x2, 0x7f}, 0x10, [0xf463, 0x9, 0x1d21, 0x410, 0xb02, 0x0, 0x2, 0x0, 0x8, 0x4, 0x4, 0x5, 0xfffff638, 0x7, 0xbd, 0x0, 0x9, 0x3, 0x96, 0x6, 0xac, 0x3, 0xbcb, 0x1, 0x3, 0x618d, 0x3ff, 0xd05a, 0x0, 0x7fffffff, 0x117ddc7e, 0x3f, 0x8d5, 0x5, 0x99d, 0x7, 0x8000, 0x81, 0x5479cbba, 0x5, 0x6c8, 0xed86, 0x10000, 0xfffffffa, 0x3ff, 0x20, 0x400, 0x6, 0x80, 0x100, 0x80000000, 0xfff, 0x111b5a4a, 0x0, 0x0, 0x101, 0x1f, 0x8000, 0x7, 0x6, 0xfffffc00, 0x1, 0x0, 0xb7a3], [0x0, 0x3f, 0x5, 0xeba, 0x7ff, 0x122e, 0x5, 0x10001, 0xeb, 0x9, 0x800000, 0xfffffffb, 0x61, 0xffff, 0x4, 0x5, 0x7, 0x200, 0xffff0001, 0x9, 0x2, 0xfffffffb, 0x2, 0x81, 0x788, 0x8, 0x514, 0x4, 0x3, 0xa4, 0x81, 0x5, 0x2535dda2, 0xfffff801, 0x8, 0x9, 0x7, 0x8, 0xffffffff, 0x0, 0x9, 0x9, 0x0, 0xffff, 0x80, 0x3, 0x9, 0x5, 0x5, 0x8, 0xbda7, 0x1, 0x8001, 0x7, 0x3, 0x2, 0x118, 0x40, 0x3f, 0x5a4c, 0xfffffff8, 0x8, 0x0, 0x80000000], [0x7, 0xfffffffa, 0x3f, 0x200, 0x1000, 0x2, 0x3, 0x1, 0xe405, 0x8001, 0xbd41, 0xff, 0x7fff, 0x7fffffff, 0x20, 0x1, 0x4, 0x2, 0x1, 0x7, 0x8, 0x100, 0x8dc, 0x2, 0x7fffffff, 0x0, 0x0, 0x3, 0x5, 0x7, 0x7, 0x80, 0x2, 0x8e6, 0xfffff801, 0x2, 0x7, 0x7, 0xffffffb2, 0xfffffff9, 0x7, 0x7d, 0x4914d7cd, 0x400, 0x8001, 0x8000, 0x7e00000, 0x4c9b, 0x4, 0x2, 0x3, 0x80000000, 0x7, 0x400, 0x3528e792, 0x8, 0x74, 0x1f, 0x20, 0x20, 0x0, 0x6, 0x92b7, 0x20], [0x8, 0x42ff, 0x1, 0x9, 0x10001, 0x84, 0x2, 0x81, 0xffff, 0x5, 0x6cf4, 0x7, 0x2, 0x3, 0x7fffffff, 0x5, 0xffff, 0x3, 0x2, 0x9, 0x80000000, 0x7, 0x5, 0x9, 0x9a43, 0x3, 0x9, 0x10001, 0x5, 0xffffff17, 0x4, 0x0, 0x80, 0xcc1, 0x0, 0x7, 0x5, 0x40, 0xb1, 0x10001, 0x4, 0x1, 0x2, 0x2, 0x7f, 0xfffff000, 0x7fffffff, 0x2, 0x1, 0x401, 0x2, 0x3, 0x8, 0x5, 0x40000000, 0xfffffffb, 0x25c, 0x0, 0x80000001, 0x100, 0x9, 0x400, 0x423, 0x7f]}, 0x45c)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x101001, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000900)={0x2, 0x4e23, @broadcast}, 0x10)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/14, 0xe}], 0x2}}], 0x1, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000380)=0x81)
splice(r3, 0x0, r3, 0x0, 0xc4ba, 0x8)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r6 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000004000000e50000000200000000000000", @ANYRES32=r5, @ANYBLOB="000000000600"/28, @ANYRES32=r6, @ANYBLOB="00000000fafffffffffeffff00"/28])
fallocate(r0, 0x12, 0x8, 0x8)

[ 1657.706630][T26867] tmpfs: Bad value for 'size'
[ 1657.731044][T26869] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1657.778155][T26866] overlayfs: unrecognized mount option "loerdir=./bus" or missing value
[ 1657.818866][T26867] tmpfs: Bad value for 'size'
10:42:40 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x900, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1657.899085][   T28] audit: type=1804 audit(1581676960.129:1309): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1967/bus/file0" dev="sda1" ino=16523 res=1
10:42:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1e}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

10:42:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x24000)

[ 1658.088434][T27079] tmpfs: Bad value for 'size'
[ 1658.165182][T27079] tmpfs: Bad value for 'size'
10:42:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000001640)=@can={0x1d, <r4=>0x0}, 0x80, 0x0}, 0x2000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r6, 0x0, 0x2, &(0x7f0000000340)='!\xa0'}, 0x30)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xc0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x7, 0x0, <r7=>0x0, 0x0, &(0x7f0000000680)={0x0, 0x4}, 0x0, 0x0, &(0x7f00000006c0)={0x3, 0xd, 0x102, 0xb}, &(0x7f0000000700)=0x400008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=0x100000000}}, 0x10)
r8 = gettid()
perf_event_open(&(0x7f00000006c0)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x6}, r8, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x400c00)
perf_event_open(0x0, 0x0, 0x0, r9, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r8, r9, 0x0, 0x7, &(0x7f0000000080)='vmnet1\x00'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000900000000000100009000000000000000000d96a59c60ca20a18ffff2090f4fff0ffffff850000002f0000003bb2e0ff040000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x50, &(0x7f0000000540)=""/80, 0x41100, 0x8, [], r4, 0xc, r6, 0x8, &(0x7f00000005c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x5, 0x0, 0xc1}, 0x10, r7, r9}, 0x78)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r10, 0x10, &(0x7f0000000400)={&(0x7f0000000280)=""/164, 0xa4, r7}}, 0x10)
r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x8001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0xa, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x3, 0x0, 0x7, 0x4, 0xfffffffffffffff4, 0x8}, @call={0x85, 0x0, 0x0, 0x75}, @jmp={0x5, 0x1, 0xb, 0xb, 0xa, 0x40, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8001}, @call={0x85, 0x0, 0x0, 0x2a}, @jmp={0x5, 0x1, 0x8, 0x9, 0x7, 0x1, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x23}, @map={0x18, 0x2, 0x1, 0x0, r0}], &(0x7f00000000c0)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x6, r3, 0x8, &(0x7f0000000300)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xa, 0x1, 0x8}, 0x10, r7, r11}, 0x78)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x88001, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r12 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r12, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:40 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1658.424706][   T28] audit: type=1804 audit(1581676960.649:1310): pid=27192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1968/bus/file0" dev="overlay" ino=16659 res=1
[ 1658.481040][T27241] tmpfs: Bad value for 'size'
10:42:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0xb3)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1658.577218][T27241] tmpfs: Bad value for 'size'
10:42:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x141840, 0x1a9)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:40 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x5, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:40 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x25000)

[ 1658.944963][T27426] overlayfs: failed to resolve './file0': -2
[ 1658.980498][T27468] tmpfs: Bad value for 'size'
[ 1659.007229][   T28] audit: type=1804 audit(1581676961.239:1311): pid=27426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1969/bus/file0" dev="sda1" ino=16977 res=1
[ 1659.088367][T27468] tmpfs: Bad value for 'size'
10:42:41 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65760373a434b69fe669723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:41 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x26000)

[ 1659.392206][T27630] overlayfs: option "workdir=./filevs¤4¶Ÿæir=./file0" is useless in a non-upper mount, ignore
[ 1659.455475][T27630] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
10:42:41 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10bc, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1659.493379][   T28] audit: type=1804 audit(1581676961.719:1312): pid=27629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1970/bus/file0" dev="overlay" ino=16801 res=1
10:42:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1659.645446][   T28] audit: type=1804 audit(1581676961.849:1313): pid=27641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1970/bus/file0" dev="overlay" ino=16801 res=1
10:42:41 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=,/file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x6, 0x0, 0x5, 0x200, 0x2, 0x3e, 0x0, 0x76, 0x38, 0x1c1, 0x9, 0x0, 0x20, 0x2, 0x9, 0x400, 0x3f}, [{0x6474e554, 0x6, 0x401, 0x0, 0x7f, 0x15, 0x8, 0x80000000}], "0184c2b517a2c0942d6715e74431", [[]]}, 0x166)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r4, 0x0, r2, 0x0, 0x10000, 0x0)
ioctl$LOOP_CLR_FD(r2, 0x4c01)

10:42:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x27000)

10:42:42 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1f00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1659.935543][T27849] overlayfs: unrecognized mount option "workdir=" or missing value
[ 1660.044787][T27980] overlayfs: missing 'lowerdir'
[ 1660.066887][   T28] audit: type=1804 audit(1581676962.299:1314): pid=27980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1971/bus/file0" dev="sda1" ino=16801 res=1
[ 1660.102371][T27980] overlayfs: missing 'lowerdir'
[ 1660.125959][   T28] audit: type=1804 audit(1581676962.339:1315): pid=28062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1971/bus/bus/file0" dev="sda1" ino=16817 res=1
10:42:43 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x6, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
r5 = getuid()
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r10 = accept$alg(r9, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r10, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r10, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r10, 0x0, r8, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r13 = accept$alg(r12, 0x0, 0x0)
sendmsg$alg(r13, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r13, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r13, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r13, 0x0, r11, 0x0, 0x10000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000001680)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001780)=0xe8)
syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000300)="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", 0x1000, 0x8000}, {&(0x7f00000001c0)="5aac09952e852ae949ad9ae53668daa386a91aad91654ba00340d26a68c8660662b53995df16bc721b516a7d6b5f842990210352eb757ea185fd71954f438ac10c53a6937a599907", 0x48, 0x9}, {&(0x7f0000001300)="17c56f2a75b509fb766727732c01a281f7cb870f3f0dcb41e1c05077e195689eb725e29a6f31afee3f98143c1456c1b553e27900de9f45ac3136", 0x3a, 0x400}, {&(0x7f0000001340)="3784ea15050fabbd74706a8e93f4482b249f7d94f9a0b9a427bb24fc6f95fdc15350380b329c373254120ba1042669ff5616aaf4a5b1f4c3", 0x38, 0x903}, {&(0x7f0000001380)="2a5f7258fd310b47ca79d71aa68fa2ee9921489e7e68acf942b5c630353cd1cfc4c380df46bf44dbfddaf88a69aa6551092cb8d051763e5a31e7e107b788efd658f05225ee252763262868f0173520b0c9cacb790c0a35fa16de359a29aaabcb72beeaaa136d154242b7eae94256e330f0bb48b7f5d996af6696d56200ae6b630e7144a7edd4041daf2f4031080de094995aff3f40c9af047a6ccb77d5c8c483d1cddc7546215af899ce252b357d9541", 0xb0, 0xd0d3}, {&(0x7f0000001440)="4fdf0866b699ee71e3b840890be59c3bbe2a4935cbf83991cc2b7e3b860bc1740eaa1e44350adec75f9b14d55320b0a048a238c1384d63857b109884b2d5e4bd8b17271bc88460025436ad747ab19465f23f2121c9961033ef48a0833a4535707a66cbfa401b170f35230f3bb2ed2eb635de15eb589f16960e71f25698c54939e6e7b2bab21a182e6519d0b18d013e91f043610037c6328020949644f5248bfb5292477f14bd023705d592b74b9ac71f884af5e1b8685f542b77eebdebb78dd06e5273c7b86b1122829a86a1d3ad39de2f0f0a439ae8395a8e5487ba3b858ad3c7da22ba71f9e5fa0380133317", 0xed, 0x5}, {&(0x7f0000001540)="a49a8e40f8c6b19ec5571df7b54d39d081b6fafbff9a51eea4acd0c3faa2859be00f33f662b139f8958e1fb3002d55beebd4f3b0f9f49fab3d288db83f96ba5e51014cbf88b013f66bbcbf68c62a3da8f2e83ca31d8f4cacda738b379f", 0x5d, 0x6df}], 0xa0, &(0x7f00000017c0)={[{@norock='norock'}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uid={'uid', 0x3d, r2}}, {@check_strict='check=strict'}, {@hide='hide'}, {@utf8='utf8'}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x5d0c76a51e45cae5, 0x30, 0x38, 0x37, 0x33, 0xf, 0x36], 0x2d, [0x31, 0x34, 0x30, 0x35], 0x2d, [0x33, 0x36, 0x33, 0x37], 0x2d, [0x31, 0x30, 0x63, 0x32], 0x2d, [0x64, 0x35, 0x66, 0x62, 0x39, 0xb6, 0x65, 0x36]}}}, {@fowner_gt={'fowner>', r4}}, {@fsname={'fsname', 0x3d, 'overlay\x00'}}, {@dont_hash='dont_hash'}, {@uid_gt={'uid>', r5}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}, {@uid_gt={'uid>', r14}}]})
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:43 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x101602, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x28000)

10:42:43 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1661.188092][   T28] audit: type=1804 audit(1581676963.419:1316): pid=28230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1972/bus/file0" dev="overlay" ino=16522 res=1
[ 1661.335431][   T28] audit: type=1804 audit(1581676963.449:1317): pid=28185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1972/bus/file0" dev="overlay" ino=16522 res=1
10:42:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x29000)

10:42:43 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @broadcast}}, 0x1e)

10:42:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x8004)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
dup2(r4, r6)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r8, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r8, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000400)=""/240, 0xf0}], 0x2}}], 0x1, 0x0, 0x0)
splice(r8, 0x0, r5, 0x0, 0x10000, 0x0)
ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f00000000c0)={0x3})
r9 = open(&(0x7f0000000040)='./file2\x00', 0x814401, 0x0)
ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f00000003c0)={0x3})
r10 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
fcntl$setflags(r10, 0x2, 0x1)

10:42:44 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x2a000)

[ 1662.117917][T28717] tmpfs: Bad value for 'size'
[ 1662.125809][   T28] audit: type=1804 audit(1581676964.309:1318): pid=28635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1973/bus/file0" dev="overlay" ino=16676 res=1
[ 1662.159340][T28635] overlayfs: './file0' not a directory
[ 1662.172986][   T28] audit: type=1804 audit(1581676964.399:1319): pid=28720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1973/bus/bus/file0" dev="overlay" ino=16521 res=1
[ 1662.257039][T28717] tmpfs: Bad value for 'size'
[ 1662.351352][   T28] audit: type=1804 audit(1581676964.439:1320): pid=28719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1973/bus/bus/file0" dev="overlay" ino=16521 res=1
10:42:44 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x7, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:44 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4800, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:44 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:44 executing program 2:
mkdir(&(0x7f0000000140)='./file1\x00', 0xae4fe1ecbb7082e7)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000000c0)='./file0\x00')
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x1, 0x0, 0x3, 0x20, 0x8, "4a61f205af9aa13e468a4cc77997464b0faecf9e2b18d7e57f27f0255e5d90a57b27f06f683adb90f38a2064f9713726931a771e6a38cec7354896ebeba2d8", 0x1}, 0x60)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1662.532632][T28732] tmpfs: Bad value for 'size'
[ 1662.624931][T28735] overlayfs: missing 'lowerdir'
[ 1662.632105][T28736] overlayfs: failed to resolve './bus': -2
[ 1662.683500][T28732] tmpfs: Bad value for 'size'
10:42:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x2b000)

10:42:45 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
lsetxattr$security_selinux(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b, 0x2)
open(&(0x7f00000000c0)='./file1\x00', 0x400, 0x20)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
syz_mount_image$erofs(&(0x7f00000002c0)='erofs\x00', &(0x7f0000000300)='./file0\x00', 0x4, 0x8, &(0x7f0000000880)=[{&(0x7f0000000400)="6d7f3cf0ee0c4985dfa7bb3d19decd2cad434dcccea4a1e98d45537172904d5af5a537106f29a51199320d176da0b0e94d4fdd28604d9a58e0e6f89cb10945d22a3c63ba6962d484e51bab30f2b1d7337a0dffeed74daa9e80dbf663718665eaa64e11c234bf78f99dcfc87695e228dfdab6a6bb5a4e4afb0855d2221d3e003aac267f582f7a88b8cb389fe16f7ec9addaf0608e8827cfe8bda340f20155273b48085337b43a3748a2d5", 0xaa, 0x9549}, {&(0x7f0000000340)="873ae9cf3b905b8f1f4c189a50929f1ed5a5aa8c873105564a188e6edffdc0c96465c684c8bf083d587bc0345a2a", 0x2e, 0x5}, {&(0x7f00000004c0)="9f64c6ca33ef5109c1782c02cc92f2cea38f4f3a5ec53bd66aae34aed3efe972486ad10f2a90f3cbb0d6d1130d9b887165dc426c62ba41a46b2730d3706ab15499b34d46a501c0490dc2e9a66a29ce1841f2a34cadb6ccb3b7d8d7529131976f5c2703bfed57a0c81011fe7bea24193d9921ba2201", 0x75}, {&(0x7f0000000540)="9a16b4aa210a10add7bfa842087ba10179c56aff49b2f6673f6165e981d53538b4e3e5420ac546a049e701782767604c05260863ea9fe1490953311bf7e2c6f3dfa3facd93b66eafaedc6e842432fa62d59531e1c779ad2c60771e4c978b8b64db06c8347799ba65cdde3894271a677a030c79339ef5aa36110f6df853d6f166e1a9f55b718d8a6a18b1e3691531913989661a786dc1e8ff", 0x98, 0x6}, {&(0x7f0000000380)="91829238f39bf3fb7efb30c18d889f77acc671a138c0ef0e9dc17d794b54df2350", 0x21}, {&(0x7f0000000600)="f4710859bacc9a3f55254071274ea28469dd0dbe791c65d54527d5c84254489e294f6561723c6691d2a39d0c8b5732ee06695bd6ddb9fe1e4700cacbd57ab300874faf661fde800fd381275b081b939a5d08cc65df5278a4461212f77716b752a7518db14212e123d09095cadedfbcce8b727323643291ca35d1ea42b493dc50b97d83613009ce307091607ff130043cd39a552b804659f1725b7365fa585d5cd60c3b2ec507f2d9d55fe35b9a5794d7bba07a05b7ed5694ef", 0xb9, 0x20}, {&(0x7f00000006c0)="ec00cd86dbfec04f9f4c354d72e2b1a560ba36a0c96cc8812b3c4dc9decaa114a76f7842f2965b7b51cec84e2a1347979681532ca6741d5652f9d33d163a262b305c760b1d44891761cf8004b54835b5a663838fa8d3228a90b5108c146db7582f167ff14867a1d81aa36cd2a382fdee8a3bcb20711564c18d0f55f5294219965d2787b38a122ce2893b30b1bd1f62429153d1460f537f3d337cf5bb69da405fc81573a23b1e0f70e12a3869ba03ff5d1e40681aea33b50127042705e27bbce2133c3476300cb45aea28dcd64eff52db4e95139b3a67ca86460ba0fb40b21493429734fb", 0xe4, 0x4}, {&(0x7f00000007c0)="ac4ec59b377124af9a3d2a8eb9452565609d3520a2a1f22d1f4da399163b322fb8f7587dc71507f8af4ccede64496cdfebbb22918e13e5de689a2c425eb30c04c6770b2b1933f30704cd56716243864561098fe126cf2ba86e94217829d08698c9e84d4c369828af4dfd8426320cbc410e8e1f60e6980f78b520e25c88a40922d27414a7304380da8e12daea34110e3e5fce227e2eaf18c36a981ddcd663c5d04504c6039610a97b67d7dbef33a484", 0xaf, 0x3}], 0x400, &(0x7f0000000940)={[{@nouser_xattr='nouser_xattr'}, {@acl='acl'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]})
chdir(&(0x7f0000000200)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001640)=""/54, 0x36}, 0x40000001)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1662.740494][   T28] audit: type=1804 audit(1581676964.969:1321): pid=28736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1974/file0/file0" dev="sda1" ino=16835 res=1
10:42:45 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4c00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1662.903145][   T28] audit: type=1804 audit(1581676965.019:1322): pid=28779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1974/file0/file0" dev="sda1" ino=16835 res=1
10:42:45 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0x8, {<r1=>r0}, {0xee00}, 0x3, 0x8})
ptrace$setsig(0x4203, r1, 0x80000000, &(0x7f00000001c0)={0x31, 0x400, 0x5})
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x440c0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0x10, 0x0)

[ 1663.000195][T28951] tmpfs: Bad value for 'size'
[ 1663.067126][T28952] overlayfs: failed to resolve './file0': -2
[ 1663.097364][T28951] tmpfs: Bad value for 'size'
[ 1663.183525][T28952] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock
10:42:45 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x2c000)

10:42:45 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}, 0x4042890)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000033c0)=""/4115, 0x1013}, {&(0x7f0000000640)=""/268, 0x10c}, {&(0x7f0000000780)=""/19, 0x13}], 0x3}, 0xffffffff}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r9 = accept$alg(r8, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r9, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r9, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r9, 0x0, r7, 0x0, 0x10000, 0x0)
sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
r10 = accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80400)
accept(r10, &(0x7f00000001c0)=@ethernet={0x0, @local}, &(0x7f0000000140)=0x80)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000300)=0x8)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r11 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000020000000000000000000df00"/24])

[ 1663.395485][T28961] overlayfs: './file0' not a directory
10:42:45 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6800, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:46 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x8, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:46 executing program 2:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$UHID_CREATE(r0, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000001c0)=""/67, 0x43, 0x7, 0x200, 0x4, 0x401, 0x502}}, 0x120)
mkdir(&(0x7f00000004c0)='./file0\x00', 0xb9)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275d2f3cbd4286ceb65726469e3052d238b56ae84cac65208583d723d2e2f66696c050000000000000056a89d71665fc6704dec430a2600"/80])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000500)='./bus/file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r5, 0x0, r3, 0x0, 0x10000, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000540)={0x40, 0x93, 0x2a7, 0x9, 0x7, "2705d2a3608ba206ee0f8d02f14751a79193a7", 0x9, 0xfffffff7})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r7, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r7, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r7, 0x0, r2, 0x0, 0x10000, 0x0)
r8 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r9 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/user\x00', 0x2, 0x0)
sendfile(r8, r9, &(0x7f0000000440)=0x7f, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x200)

10:42:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x2d000)

10:42:46 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="9e55a51e99e98abf9d5b04008b1c24b6c01e13bab1d06304bf98b662fbcce1", 0x1f)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x2, 0x64d, 0x1, 0x0, 0x3, 0x5, 0x7fff, 0x2, 0x0, 0x18c0, 0x0, 0x80, 0xf8, 0x6, 0x0, 0x0, {0x8, 0x20}, 0x2}})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:46 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6c00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1664.503642][T29495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1664.603939][   T28] audit: type=1804 audit(1581676966.829:1323): pid=29499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1885/bus/file0" dev="overlay" ino=16789 res=1
10:42:47 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7400, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300"/24])

10:42:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x2e000)

10:42:47 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7a00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:47 executing program 2:
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65303cab1fa639b37e07e87bc1106307b8d40e530c695eb8c94048ac132268b6d627239365903d77acbdba840a8bbd4a9528be43f9693c99b0571d788f3b1d6602b1fef197c43c7dcd6933a350709dad938fd4f6042bbaf99aa1ea7cf5994b8eecc24024c3ec2d3bae8210188a29d08cc0871726143d62c65ecf80057c9724fa50d5d955a984700c01c39bbcae3181225965ba6813483d31f6e5515fe5ec"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={0x2, 0x100000000})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
r1 = socket$kcm(0x29, 0x7, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000001700)='security.selinux\x00', &(0x7f0000001740)='/usr/sbin/cupsd\x00', 0x10, 0x2)

10:42:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x2f000)

10:42:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb1b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x40)

[ 1665.496108][T29933] overlayfs: failed to resolve './file0<«¦9³~è{Ác¸ÔSi^¸É@H¬"h¶Ö'#“e�=w¬½º„
[ 1665.496108][T29933] ‹½J•(¾Cùi<™°Wx�;f±þñ—Ä<}Íi3£Pp�­“�Ôö+ºùš¡ê|õ™KŽìÂ@$Ãì-;®‚Š)ÐŒÀ‡&=bÆ^Ï€|—$úPÕÙU©„p
Û¼®1�"YeºhH=1öåQ_åì': -2
[ 1665.676871][   T28] audit: type=1804 audit(1581676967.909:1324): pid=29942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1977/bus/bus/file0" dev="sda1" ino=16596 res=1
[ 1665.690143][T29935] overlayfs: failed to resolve './file0<«¦9³~è{Ác¸ÔSi^¸É@H¬"h¶Ö'#“e�=w¬½º„
[ 1665.690143][T29935] ‹½J•(¾Cùi<™°Wx�;f±þñ—Ä<}Íi3£Pp�­“�Ôö+ºùš¡ê|õ™KŽìÂ@$Ãì-;®‚Š)ÐŒÀ‡&=bÆ^Ï€|—$úPÕÙU©„p
Û¼®1�"YeºhH=1öåQ_åì': -2
[ 1665.790837][   T28] audit: type=1804 audit(1581676967.999:1325): pid=29965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1887/bus/file0" dev="overlay" ino=16674 res=1
10:42:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x2, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:48 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xbc10, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:48 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
getpeername(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x30000)

10:42:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000000c0)='./file1\x00')
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1666.653108][   T28] audit: type=1804 audit(1581676968.879:1326): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1888/file1/file0" dev="sda1" ino=16631 res=1
[ 1666.741144][T30269] overlayfs: failed to resolve './bus': -2
10:42:49 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1666.783216][   T28] audit: type=1804 audit(1581676969.009:1327): pid=30314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1978/bus/file0" dev="sda1" ino=16769 res=1
10:42:49 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x1})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000000000000000000000000000000000000020000"])

10:42:49 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765722e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f6669040030e4c643683cee8e5161d811b2d8700c7c30fd1d6553c8e51e00000000"])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x2, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@loopback, 0x74, r3})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r4, 0x10, 0x0)

10:42:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x31000)

10:42:49 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xff00, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1667.147900][   T28] audit: type=1804 audit(1581676969.379:1328): pid=30484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1889/bus/file0" dev="sda1" ino=16550 res=1
[ 1667.289442][T30553] overlayfs: unrecognized mount option "lower./bus" or missing value
10:42:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x32000)

10:42:49 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", ""]}, 0x14}}, 0x0)
creat(&(0x7f0000000380)='./bus/file0\x00', 0x4)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f00000001c0)='./bus/file0\x00', 0x141042, 0x50)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./bus/file0\x00', 0x640301, 0x21)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1667.398430][   T28] audit: type=1804 audit(1581676969.629:1329): pid=30698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1979/bus/file0" dev="sda1" ino=16662 res=1
[ 1667.579931][T30553] overlayfs: unrecognized mount option "lower./bus" or missing value
[ 1667.675664][   T28] audit: type=1804 audit(1581676969.899:1330): pid=30698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1979/bus/bus/file0" dev="sda1" ino=16550 res=1
[ 1667.787434][   T28] audit: type=1804 audit(1581676969.979:1331): pid=30709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1890/bus/file0" dev="overlay" ino=16644 res=1
10:42:50 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x3, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:50 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:50 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file0,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000cd2320d3ca3d4a2b851eb5c854b3c334fd49180ed77894f835b808c7a481b2241ae94b6ba6fcdd70890d9fa3ef581dacc1efa37ee5875840c7194f4d9adb38e2c42c", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="08003400030000000500330002000000080039000101000008002b0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4008880)
getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4)

10:42:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x33000)

10:42:50 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000000000c8687cd1cb2ee8bf"])

[ 1668.730526][T31038] tmpfs: Bad value for 'size'
[ 1668.738124][T31036] overlayfs: workdir and upperdir must be separate subtrees
[ 1668.813874][   T28] audit: type=1804 audit(1581676971.039:1332): pid=31036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1980/bus/file0" dev="sda1" ino=16738 res=1
[ 1668.868126][T31038] tmpfs: Bad value for 'size'
10:42:51 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1668.924032][   T28] audit: type=1804 audit(1581676971.039:1333): pid=31033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1891/bus/file0" dev="overlay" ino=16689 res=1
10:42:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,1,upperdir=./file0\x00'/47])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x34000)

[ 1669.090690][T31250] tmpfs: Bad value for 'size'
[ 1669.188070][T31250] tmpfs: Bad value for 'size'
10:42:51 executing program 2:
prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0))
mkdir(&(0x7f0000000240)='./file1\x00', 0x100)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469703d2e2f6275732c776f726b6469723d2e2f66696c65312c75012065726469723d2e2f66696c9a24"])
chdir(&(0x7f00000002c0)='./bus\x00')
syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)='./file1\x00', 0x7, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000300)="b8febb10358a507537576e2495cf1eb4793b15d90b1c5bb440f8f938027f88994eb051c9121671e1f903529a5d81e08e7690af0359d12e8c271d25987d529004b3bf1f7e6ffb0c23d56cb187972a7361360f85b8fde8534c0a1e67fcd8ea67cb88b07823f0a4d3d9d4f4303e77f5469479a35b2acfa2a7f4f2eb22a4ce1e6c5a", 0x80, 0x100}, {&(0x7f0000000380)="167375cd671055de310eee83c3aca5deaf490326835b71c32e4f7d7adae5100614d941203305a031eda2cf4a6ee506a961fb15b24b9e17e5775d1f26db3bfc4334cd07f348648ba3c6a4f5a25964a1bc8beab378a8d0ee1f2f5dfd562d2bb6f17c74adf8f529cef2dc4347bf0403d466d2678d252d887803d8556191311df851146f83871845fec20549261f7107499ef27be1ff7c9db7990daad98aa6aabd7850b653eb4481dc223e49", 0xaa, 0x3ff}, {&(0x7f0000000440)="f048f8cdfdb5d905c9024baa5fed1c246b8c9f9d0ecee51ed2c2ab30b7808bd8a8c69ee5c3811e61b80d8707580ad570dcc93037ec6583584b370636f51c1368d39dd2d292224ba5191231616d407819504ab9d629043a6c5dfc30b188d8e0e22f6f810f0788054426c31aeea18c0b740e19686952ac68ef13dbf60131fb8d9a0e5c725676e0ee817153f779b6a79874c77316f82b28c4bd063418ac20640898443d74e9aa588ef8a9668e62", 0xac, 0xffff}, {&(0x7f0000000500)="27f7017ef15245a03de81aaabd66b2dc918032a0ddb1c5c409514d157e6d50915226ef3dc914e125e11bfb3a0d97a5fa7aca4695a6b4f3c77993b5516f57e257721f9c4f991f310f48beb8ab1305bca99cbbdd2e5ed0c5d92ce8840be600c9a66390fc3820e61fb549922241bd0d579ccadf1aa92237e38725a521a7c67a1820d95b2a7e14c1c7005143d8f065627ee73d2e966fbd19ff3948b770e9b42b48634226a576479f", 0xa6, 0x77f8}, {&(0x7f0000000200), 0x0, 0x715}], 0x280000, &(0x7f0000000640)='\'em1self\xcb\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000))

[ 1669.263873][T31260] overlayfs: unrecognized mount option "1" or missing value
10:42:51 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x35000)

10:42:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x8)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
truncate(&(0x7f00000000c0)='./file1\x00', 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
rt_sigpending(&(0x7f0000000140), 0x8)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1669.555595][T31465] overlayfs: unrecognized mount option "lowerdip=./bus" or missing value
[ 1669.556399][T31467] tmpfs: Bad value for 'size'
[ 1669.744961][T31473] overlayfs: unrecognized mount option "lowerdip=./bus" or missing value
[ 1669.755209][T31467] tmpfs: Bad value for 'size'
10:42:53 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x4, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:53 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:53 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x36000)

10:42:53 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r2, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r3, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)
ioctl$SIOCGSTAMP(r3, 0x8907, &(0x7f0000000040))
pipe(&(0x7f00000005c0)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x1, [<r9=>0x0]}, &(0x7f0000a8a000)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x14, &(0x7f00000015c0)={r9}, &(0x7f0000001600)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r9, 0x1}, 0x8)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="80ffffff", @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xa0823006}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6d8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2f52}]}, 0x90}, 0x1, 0x0, 0x0, 0x20044811}, 0x40000)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1671.138743][T31803] tmpfs: Bad value for 'size'
[ 1671.176873][T31808] overlayfs: failed to resolve './file0': -2
[ 1671.257749][   T28] kauditd_printk_skb: 5 callbacks suppressed
[ 1671.257767][   T28] audit: type=1804 audit(1581676973.489:1339): pid=31810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1982/file0" dev="sda1" ino=17089 res=1
[ 1671.296907][T31803] tmpfs: Bad value for 'size'
10:42:53 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:53 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
lremovexattr(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)=@random={'osx.', ')\x00'})
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000400)={0x0, @reserved})
mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='9p\x00', 0x201a, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0x7c}}], [{@hash='hash'}, {@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@fsname={'fsname', 0x3d, 'overlay\x00'}}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role'}}]}})
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xe0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:53 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0xa10042, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1671.466427][   T28] audit: type=1804 audit(1581676973.619:1340): pid=31845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1982/bus/file0" dev="sda1" ino=17095 res=1
10:42:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x37000)

[ 1671.601023][T32018] tmpfs: Bad value for 'size'
[ 1671.657141][T32018] tmpfs: Bad value for 'size'
[ 1671.718620][   T28] audit: type=1804 audit(1581676973.949:1341): pid=32026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1983/bus/file0" dev="overlay" ino=16753 res=1
[ 1671.759407][T32026] overlayfs: './file0' not a directory
10:42:54 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=<r2=>0x0)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000140)='./file1\x00', 0x5e, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000300)="0e449f993a6b9e6f6c9ffa48707eb22d0b5d215d7712b47075c97b4f10ae83f6b6aed4e2f798ece47be23233369841b90eb2945e03a2fbc4222e5519383325cd1a3a87bccf5de6f1ff8bb06cd5d50306a49d457e1426cbb2e5d128d23a18b6a52e1c724285bd3048adc277549003ecf4a7b9e18129fe3c48efa7c2f2ff469bb744820b7e5d3b7a67556c139ad686a911083dab87953a3eeef910b481692fe27a66ae8eadd0569d241b90991daae809c90da26227830e457723d0557bb52adef19bb24b0af7266ee362c85029639aa375094581649ada20fd6dd5d643adf91da9e6d9adf1d1109de5b84dd3663354e7148d64bf07d4788e01d31e98009a02bf34e777b0abc17b8cad7880e325e6bc1f8b2d4cb8894393fa9618d32d5c334517745a19ff27049e09b6ef671bc1f04e969ea1741487bf89181f855894f8f840ea8fcf8c20e4f056c8ea02ec43373e1a4f200827d22db649282d87a540a3334f69b85714f527d5874667027ff05ae183d66f5042222eeb21780e770b923d2ebcec71ff8db9ab278c8f3980108de1a848d9bdf90190621b281b951078a4f622fb2ccab9ceb8c3a86e95686d0dd27b81bb72ba6acb110d940d853393d8aa9957f29f7ab3c1cdab8ac534eaee6b6faefa4803d45d7c01b89f40a9184acce856479dfa1a81ab163a83271b242ae6e6fb4fb68201085cbe9e0b9ce0f6799f029e5c948deca5e255ab00a6824c24ec668265724e26c71b44d2df388059cdf15ca5e87a96f48b83e00ba4fcda0c536ede9a6d671dd7bae298635cfa437b925369741b6acc9feb51d2ad283eeae3c00b3cef1fb860ee28822273ace0c814b57bb39b4e31025d65a7c00d9955b895cc81eeb121e67d751679726c398af8bb317dcf010965798d1e252419c6d805f4f0aa3fc9d56f76fb2393ecbd4d2351b168d629c615cd16f3f881bd5fc0011a1a21c1e479cc2502d067fe4dccea73207b3a96df0d933860a1d6dc0d96cac55632f50b2d3a9d44e646349543f6aac70e2391b05e6ef495ff475768fb5ff31aa8fe845d66bfddf0af02572d33ab74c1161434de674f2a3130e8af960a8ff5a8c0fb8712bdac86665e9b8e070ad8b9461ea61c7a681bac4364ead813253bf84e1be2221e1ac0408cf09f390ce77ae6c4f948e129b18c938a1104b168d36974f9e0fcc866b99dc8037f5903ab58a725b63fbd01590cd6f2deed4765d82ee4ef388d419498a199576dbc30aa1e3004a193ecd168fadd21f7395ad78e15a1760b4340e7234d3ebf4fa0031a0133ade3a3dff78a4c84a2370ac0fe46874478dd13150d539eab0d67e064ee1f1bcaae74a9e82ea1c0616518c935de5ae55d26235430db23fa2bf1c1906aa7b0e3f90af8b743d4ce3e88485bf789b5e6d4ed406a8339018e331f9206b7cd53f949e7cb16870eafb976285389bb09ba68d10ff0dc19092a8321075ae90a9cec9ab4c0a49e9d7adc54d331ab159e25e0115c5cb3959eee300c118b286363b017c266d9cbc57ba16665ae0a74625d3aa6724b50466aa101e8232fc7240142168c19616f06df0654ef599bcb05153256ef243c5857594da70264aa68dc71494005b462aaab0e1c6f915a32f03e8a14ed6147b38a29d5007c9f3f3f47954b88141114b92678fd714fbfd33a8dc25a2a1c3fee6cd4e0d5228dc3b8968974c1ef6aae26c8aab724bddc29c3cf51465b99e3c253c7dcd847ca627dfb22ae1387fe47aaf4d357c960ad4cec0ca0c92cfa260af7c5d60812d1d1bd37c4787d521eca6e85d979c1ab8e8dd4eb69645de5a8d4cec14b7b07478b18a229d07a5ba220afbdd922671edcdb503a85641a0114ed216a3ec377c1576e64f3acd25f016b495a856c14a69f535d5dac11c2bd70fa1df863f76f2a6238bfe024a0eac315ca51520c3dfe9f7efbba2cb8151d0197174f3273ff3cb06bfefc87c750776c59778c7b90f17e2c473111a06c4d1fde128388b5ae2bdec788e6a35c3751b4794db17e16048d9b549b051099fac48169f1d329d69919c27c8d90ecf7524b8839f42a8a5da976439ac47b058c614bc412a25f67a0ddb114fff78ea65d4a1dbe5b70eb9ec855146d72f7e079dbb634e5f600cf0ac0581e390975ced5a4ee33105adf897c9a2925f9f883ecb5b1c84784491bb55ddec9b40c1df29ebea39b28891572c5c60dc2eddc16297cf0744744e932df736c558d17bf7f8e41300c2b5d808f0bc2a558c81b21bc82ba0fb238c2ea5ba75c63d3106b4102e70ad7975e3a45e25076b2eb4c5d4156f678c0ce8fdd1713179f855a0c750e0d905b15c4563c37245c8021ec1f0eb3fd540a9b76631b24a8186f15b15ca24edbdfdccfffd0795fab0775e739cc7092b7934e6245c29d00beedaf0eb9bc77d8ec9b05a711821ef3498ef2163f62b27a32836c9741e7abe7533f095ce14dcdb39bf11ec9ac8ec5f52dee14a9a7a59114beaa05aa16efa54faf9afaff8c2a9dc7f79ccde1f57af6732c8c4b571fd26dd86082733f2463c26e9d1c39b398d91891cdd8580e437481de0dbedda5c78cf07db7d5175b9acd5ff7db5bcd5ea9cf16b4b8ee714653f2436697466671b30081eb1649eeef7cf938fe49bc05e9af4f8ef12acf538bcce9fd3b68adc526d158e9e502ad7598ab82c89fa2c8f94b80ac98d8489e819163f7605773b5374e43342fdc2de96bab504aba56393949a18b2ae2857454c36e8f22367a251461c99b1e7149ee2f3d3a7b109336d0a5246e4a313c9bf4f0532e86e6ad6016883f011bf6ba1656e856315f27a0208a60dd25893e9e63e6317ff45e915e1741cacb85ecd2ccf9facc02be35faaea408b177c957d384599ca44e61e267a31e9c6018100419c6f162fcac67dbb9fc606400b522f13995e966f06f6b9270ebfc62c7a7965c0f1db25648dee46f8e3993816d257d8279a0ef74467b74a6b88cbb68c6fa96b4bd3c88ac99684cfd87d83967665127cad13a8a60e41f92deb00992ddd238a012d548877516850554146e46561d0aa4f0856507d7a06c1934d40cdd11678e060d6e88ae02c48ff6d8a7e19337e6218ddb5af3af6a6e1a78d6aeca4a61fbdea26aa74c9e072f6375a7520d9121817734d9065f7430f806d498b6567587465810baa87292916db122be63fec077b50e9a0e9004c8a6b1fe1b889b5fc57c0a81c94497f29bb7f0cdf65879b60630b0e07de28f21a7d9d79c018fae5a59ab7e98b096c8653bedeb0694247f68620c4c6fd1cd7bf1b28c68a3bee9f9ad45ee5616f585a4b3c76dd288b0523d573f3b6c2388e32ac2b9a374118a73358466819516cd23148d5f9a79f092644b073b5562c686c151853424797a5dc7f4fa05c6b3be70f937a99a0dd42443f6a01ea6af1785d17a2b661660ce25c879d5f27c0534c2d230e0031cdceefb07e793cce839dfc638d62323419d730be2e81b0d78d99e57d48e5d460af8595e96710fad140666e58ef1f899766d5bba2f5fa48d753fe7a8498cc3eb6121a691b2576155f93d8191d9bc5280ba3113fe141a1fbb7175ae0351cf3d6c31b2125d4e6542f199fec6ac0df4261c66f07a5f5c188ef4db1b91797b9b54d80fd61711171222e52affd0ece3e1d263592c40198d7ad1df7eeb4c4d8ac88891489ae29a03e68a1a37a5cc7b9f34230799f9edc7e642b055980a06f2105bb023bc86a633478521d98c17f85e6ea0a76d2a04e9dbd2fa076aa49c6d73ca9f8742e831d1e05617c3545f057bd5afa98f210f8b7c3fb6b3e29c816e56ade2e097ddbc5e3eb29557b26874e92ab1454bd1d077625863a2bf734f34ae34767af613accfda05c00869c15575df2ac622a6c8e7a7ee18eb3c467aa28ae63e07f7633a800e8df2600e44ceebe492498b98cff1cac3028ec0c586633f6760cc879f484501827fc00ad6bbfbb2f357973cdfacc2edd7a0cc8b33fd2f8d5295dc6816b440c4249653f006af2620165c92c65382fbc80908dcebaacd68976d7157e0a78b5365f5c6de63d8f079915634f9e65c1bcd5038fa98fd229e454f96422796c03726bfbf8ac6e31f60f8b78648ea83d49f7c57fd9322a7c2f5e07b840ab0a8f53605e35b150b7d0052626a77f00c3f4045913acf51d58fca50c40942b61b705a545d578ee2132c91f40b21d7ed92df910ca250813170c926cadb19ea0900f7d559d9316bf053ebc7edc7afa49775ba37cb7b48d149556388fc64c61b289d9bc0595063f47b135be2dc652151a16c108123ca50e0dcb3bbdae4374af018551cbc78d20ea7b2fe96a759534c784727045ec36b879ff68aa2f2f1c9748c92af6cca3cf2cde630ff63fc43aa4393b97a6b590f4db7318050834faa3c9b5ffd05db52166e5deaaf9a8e430b2362d5ee03319dfa0b0e9609c4f27df7acea0705374bb59a88ff034b57e763658fde4d5cef358ae6548caf39e923fcae54d3d317c2661f28788c2e14a539bae5db0a7a55f6948ac79a5e109b2f98f8d131e155c33e9707c9d7d9d4b2ecd875556afcaf0f32bba47e5bf7507baaf96f424aa42cdedfa23a41305fd62865b74e48a36731e2686e987cc6033554cc26e5cf586b4b120a3f5abf0e6479a22aab7a4c50c3cb96fe4d454f7a60ee71bbca0fc479e68fa74f4ff0180187af1e8f48128d4dab341bca9a678e4949700015a0551aa887fbacbda1fa726f3b61a5b7930bb3473e53b658d112922499bbfe1c3baa77e5352ad2c071cf948f5c4524e05fc71d96212ea9899dab44e1315f786f6015a64b8bc2a176a279e3fb8e8d56139bad78aa9f429f4117f778875f9fd0d68be493f3e2732ac405e9caaa7823032aefd222ce6a3065dd15e91af081950b004f07237d487cd2369e1fdd2d8f25eeff0789716388154fa99ab2d4190fd36db00f76bba4003fd6a5f2f2ca3e1a81165fc95968fad0ed1761b442b7992df2f8cf27ad2ec32872e28b5da59d60211840d1cc784739cf5c57514b84ebf9deb64e32f5fb3e55937ae70759a1a2a60942019e4dbe1be651d32187e15b936883b920e7b612eea637b534139ff440c0b43ac4ebdd8d1cc94d1f7067f56d76ba4184b6083f8f707a6267f052182b62f51915cf5afe18109936d797e2429599e56f39f8dfbb44ff68863983c546167d5288e45d0e16b968f2c3d3e9a5d466e46a9b8418f8058d77ec3632f20b0b53ea456d8f9f33d3ce8fd6869ced961e143782dcf873877a9a0fbd2d683541302b5777da312f9a435b2b8552367f03d3982becc398e9e07cff355b6b8d4d9a5f343ad31d5a2b551375069af25c2e0c2fd84657ee546a3a5b78ae3ccde8af7d80ddbb44c7429832890c88393d7d697616253ffc70bd48d8c99ea9288e929aee59145bc5ce90a226a74a653b04a2ada3acd7fd99f685ecfb0d8f09bf122fb3c4c1228bf23eab1ed836feb655d81a1da3ab1bbb44f50806ead0ace688155f29afc2b47bda33e3af62828be03445f9663e9767a6c3e48ad09969c392f628de27e6d35a9621948dc940f24891aa9ca1031e2dd55fc6c389f9fd643162f0ed70918ba046d620cc403bab04b9d4b540ed8ac41e9e7884016babdbde4bb3c401585d5f65b2a394c701d9d34e973131ebd7f2d3ec740c89d653a18fafeaa6b748f4ac227cb694b97a1aab858ef5aad59d0acf6492d7bb9973ed31b639a668e90d1d2133f6fa83bf7af17e5a0c7d47186d33c5c5679bce3cd9d243e739ad8ad0b60fb30795f352cf225ebd50613a01313ede3c34a12e2e6b983b41b19d63ee667adb479f957716181b0de4b655758adaac2a91680779bbb9e537", 0x1000, 0x20}, {&(0x7f0000001300)="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", 0x1000, 0x3}], 0x190000, &(0x7f0000002300)={[{@locktable={'locktable', 0x3d, 'ppp0'}}, {@localflocks='localflocks'}, {@quota_on='quota=on'}, {@barrier='barrier'}, {@quota='quota'}, {@statfs_percent={'statfs_percent', 0x3d, 0x1515}}, {@data_ordered='data=ordered'}, {@lockproto_dlm='lockproto=dlm'}, {@lockproto_dlm='lockproto=dlm'}], [{@euid_gt={'euid>', r1}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vmnet1systemkeyringeth1'}}, {@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r2}}]})
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0x10, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
ptrace$peek(0xffffffffffffffff, r4, &(0x7f0000002400))

10:42:54 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x38000)

[ 1672.077015][T32170] tmpfs: Bad value for 'size'
[ 1672.147539][T32170] tmpfs: Bad value for 'size'
10:42:55 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x5, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="cfb3d1a23c86a6ab946e4a7438b1d94d15552769a50f492ff324e4ac0cab0a17a10a26e70fa0cb538a8c7b5d449ed2dab05b2a6fb2a71e114fe4ea817ef772a104be0c333747bce8b9c813ad3d17059c907fd67b914fd61d4ef3648deff7d3a358cc", 0x62}, {&(0x7f0000000300)="7d0d5aa291442bbfe2db80ca03a7d985581620218bb9fadbcd873ec27f1466f3f78a878e1e62b21c01cb3c5a8daf016da45b97df2d90b1df515d3b5093a148dc37c8842f2598b7a608", 0x49}, {&(0x7f00000000c0)="5cf1e2eeec36cd1ac6dfa61040866ac2650fc855d889567bb036f2cd50720e9d49a6711b219dc600792b0da2c63935b2ed", 0x31}], 0x3, 0x7ff)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
sendmsg$sock(r1, &(0x7f0000001580)={&(0x7f0000000400)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000015c0)="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", 0x125}], 0x2, &(0x7f0000001500)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x60}, 0x80)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:55 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x482, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:55 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x39000)

[ 1673.228598][T32465] tmpfs: Bad value for 'size'
[ 1673.338391][T32465] tmpfs: Bad value for 'size'
[ 1673.364971][T32503] overlayfs: './file0' not a directory
10:42:55 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000140))
chdir(&(0x7f00000002c0)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:42:55 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:55 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x3a000)

[ 1673.650225][T32678] tmpfs: Bad value for 'size'
[ 1673.756515][T32678] tmpfs: Bad value for 'size'
10:42:56 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1673.787336][T32684] overlayfs: filesystem on './file0' not supported as upperdir
10:42:56 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765050000003d66696c65312c75707065726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1673.985190][T32693] tmpfs: Bad value for 'size'
[ 1674.077796][T32693] tmpfs: Bad value for 'size'
10:42:56 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x14)
mkdir(&(0x7f0000000280)='./file0\x00', 0x181)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowe2dir=./bus,workdir=./fUle1,upperdir=./file0'])
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="90b407c6d48fe70e0482c930eaa745ffcc78bffcec27056a98d932348d7f6196f53bade41d2bafa3fc03c5f66915072f35d5fb70243d4efc4f47cd588243e357b768edbfece057254bd17e68c6fef96ee670fdad3c3ce27396151f627170505fc4660d80b65f03bb2fc36da590e601010dd36aaaf5fb93fc463e7c06c59539adaac34262116a45e830ead5e9b1d1d48371a698c45bad73c53c501264b21476a892705b844f3bc48346154e8827f1cd9694a5ae1c66a4ee2908d82ed6ca3afe2590e0f5bfeb7e281ed26dd255b9", 0xcd}, {&(0x7f0000000400)="aaa9158ebde28e6526135066633b3537dcbd630946ac2cef14dbb5bd6f70aeeb20da114b504016ff8469e03e12ece3fed3e55e0599543a6787be8af458e1777039a9fd126f0d808a74768a90ca5485ce72dbcd359fcbaacafc4ad75626527d6218812009672284e692fe38388aa758c0db06d78de6b790cb183506bb4b968ed1e6d906b17a9e80f551e3344b43e5fd043262bfb5d445037d34ee471aebb2221cdae40144bae4a798020860ee", 0xac}, {&(0x7f0000000140)="6e967e7c4fee6535b4e3ba82b91f", 0xe}, {&(0x7f00000004c0)="ea8c532aaa1b848ea7e394d3aba2eabc31e4a3ec79f14bb4e7626e08b5a531987e5eb7999169ad6ddc4a1ed915c44942aad3383531f626db04c44abb44e56ccf0629cdbf7868d0ce51c544002c23a48d30a52ea29ee3cf02a6695ae871d2ed6556a5e5f6fc60ae7fc217e5a87b05f526e7a115de756fd3c9119179e90f89bb5236bfe23b83ab790984c0910678989e2f0888488e56c6307fa145815391382f5197ccbe52a7b0f763", 0xa8}], 0x4}, 0x4008000)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="03445722ffaa313b73fa9c5b8bc959e3e72c000000000000"])

10:42:56 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1674.316265][  T335] overlayfs: unrecognized mount option "lowe" or missing value
[ 1674.330124][  T336] overlayfs: unrecognized mount option "lowe2dir=./bus" or missing value
[ 1674.364508][   T28] audit: type=1804 audit(1581676976.589:1342): pid=335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1987/bus/file0" dev="sda1" ino=16705 res=1
[ 1674.391761][  T335] overlayfs: unrecognized mount option "lowe" or missing value
[ 1674.430354][  T358] tmpfs: Bad value for 'size'
[ 1674.507309][  T358] tmpfs: Bad value for 'size'
10:42:57 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x8, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:57 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x3b000)

10:42:57 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
recvfrom(r0, &(0x7f00000000c0)=""/20, 0x14, 0x40000000, &(0x7f00000001c0)=@caif=@dbg={0x25, 0x2, 0x7f}, 0x80)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:57 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x12101, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x40000)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x80, 0x0)
getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r7, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r7, &(0x7f0000005880), 0x0, 0x2043, 0x0)
splice(r7, 0x0, r5, 0x0, 0x10000, 0x0)
io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6473723d2e2f66696c65312c75707065726469723d2e2f66696c6530dbe52054a3cc8d2c9c048424ce527153aa8374483979a1a7bafd5a6f7d017558110d24"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

10:42:57 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1675.464390][  T565] tmpfs: Bad value for 'size'
[ 1675.481940][   T28] audit: type=1804 audit(1581676977.709:1343): pid=559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1898/bus/file0" dev="overlay" ino=17099 res=1
10:42:57 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x1, [<r6=>0x0]}, &(0x7f0000a8a000)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x14, &(0x7f00000015c0)={r6}, &(0x7f0000001600)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x3400, 0xb3, 0x899, 0x6, 0x2}, &(0x7f0000000140)=0x14)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1675.585599][  T565] tmpfs: Bad value for 'size'
10:42:57 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1675.713379][  T563] overlayfs: unrecognized mount option "workdsr=./file1" or missing value
10:42:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x3c000)

[ 1675.805485][   T28] audit: type=1804 audit(1581676978.029:1344): pid=563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1988/bus/file0" dev="sda1" ino=16521 res=1
[ 1675.866252][  T776] tmpfs: Bad value for 'size'
[ 1675.885363][  T779] overlayfs: unrecognized mount option "workdsr=./file1" or missing value
10:42:58 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x1015, 0x5, 0x7, "2b48ecb57fbb536a5116f4f0dee0cd43", "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"}, 0x1015, 0x3)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x180)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)
recvfrom$unix(r0, &(0x7f0000000100)=""/76, 0x4c, 0x40000103, &(0x7f00000001c0)=@file={0x0, './bus\x00'}, 0x6e)

[ 1675.964183][  T776] tmpfs: Bad value for 'size'
10:42:58 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1f000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1676.223003][   T28] audit: type=1804 audit(1581676978.449:1345): pid=827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1989/bus/file0" dev="sda1" ino=16631 res=1
10:42:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x3d000)

[ 1676.285147][  T982] tmpfs: Bad value for 'size'
10:42:58 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469593d2e2f6275732c776f726b646972592e2f66696c72000075707065726469723d2e2f66696c6530edaab8bd909a3fd9282d0f860b99c82024b32b7d81cf10a3999d9f8e7c763b1e1f2e2ea7112250c29989f11ca691a627c06c88543cf8de8ad3c6750549ae1d94e54ba1dd186067f31354eab0e5ca2114b89513fd7433bf195a82301a29ce7d3d0520d7455cef929ba86f7499cfb86afc57a91d849461c0d05f703458311ccf181e75896280"])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x34e1, 0x3f, 0x84800, <r4=>r1})
ftruncate(r4, 0x88)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="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"])

[ 1676.365612][   T28] audit: type=1804 audit(1581676978.529:1346): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1989/bus/file0" dev="sda1" ino=16631 res=1
[ 1676.381631][  T982] tmpfs: Bad value for 'size'
[ 1676.598482][   T28] audit: type=1804 audit(1581676978.529:1347): pid=987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1989/bus/file0" dev="sda1" ino=16631 res=1
[ 1676.662991][ T1189] overlayfs: unrecognized mount option "lowerdiY=./bus" or missing value
10:42:59 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x0, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:42:59 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./bus\x00', 0x145043, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00')
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:42:59 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:42:59 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000540)=0xc)
setregid(0x0, r3)
r4 = getegid()
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000540)=0xc)
setregid(0x0, r6)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000540)=0xc)
setregid(0x0, r8)
getgroups(0x4, &(0x7f0000000200)=[0xee00, <r9=>r6, 0xee00, r8])
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000540)=0xc)
setregid(0x0, r11)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x999fe1918ae839f0}, [{0x2, 0x0, r1}], {0x4, 0x7}, [{0x8, 0x3, r3}, {0x8, 0x4, r4}, {0x8, 0x6, r9}, {0x8, 0x0, r11}], {0x10, 0x4}}, 0x4c, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r12 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r12, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x3e000)

10:42:59 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x10)
execveat(r1, &(0x7f0000000540)='./bus\x00', &(0x7f00000007c0)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='overlay\x00', &(0x7f0000000600)='(*:)selinuxvmnet1\x00', &(0x7f0000000640)='(\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='&-(!md5sum@{\x00', &(0x7f0000000700)='&-(!md5sum@{\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='&-(!md5sum@{\x00'], &(0x7f00000009c0)=[&(0x7f0000000840)=',\x00', &(0x7f0000000880)='overlay\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='em0\x00', &(0x7f0000000980)='\x00'], 0x1000)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000500)=0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
r5 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
splice(r4, 0x0, r2, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r8, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r8, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r8, 0x0, r6, 0x0, 0x10000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000a00))
r9 = socket(0x22, 0x2, 0x2)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040040)

[ 1677.352161][ T1325] tmpfs: Bad value for 'size'
[ 1677.411262][   T28] audit: type=1804 audit(1581676979.639:1348): pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1901/bus/file0" dev="overlay" ino=17025 res=1
10:42:59 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20100000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1677.521781][   T28] audit: type=1800 audit(1581676979.739:1349): pid=1331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="overlay" ino=17108 res=0
[ 1677.560390][ T1354] overlayfs: filesystem on './file0' not supported as upperdir
10:42:59 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f776572d54b393a317d5ea6d827d59d17a459506469723d2e2f6275162ca5cc726b6469723d21c3342b822e2f66"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:42:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x3f000)

10:42:59 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x341042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:43:00 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:00 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x40000)

[ 1677.984036][ T1642] overlayfs: unrecognized mount option "lowerÕK9:1}^¦Ø'Õ�¤YPdir=./bu" or missing value
[ 1678.088502][ T1644] overlayfs: failed to resolve './file0': -2
[ 1678.111256][ T1701] tmpfs: Bad value for 'size'
[ 1678.224683][ T1701] tmpfs: Bad value for 'size'
10:43:01 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f775936e5aff5a653166275732c776f726b6482723d2e2f66696c03312c75707065726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x70, 0x2, 0x6, 0x3, 0x1, 0x0, 0x0, 0x10100, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x1000, 0x1cfb, 0x6, 0x5, 0xfff, 0xff, 0x6}, 0xffffffffffffffff, 0x5, r1, 0x0)
r2 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
prctl$PR_SVE_GET_VL(0x33, 0x3c67)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
r7 = accept$phonet_pipe(r4, &(0x7f0000000140), &(0x7f0000000300)=0x10)
r8 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r10 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000400)={0x3, 0x0, 0x9, 0x0, 0x0, [{{r0}, 0x7f800000000000}, {{r11}}, {{r2}, 0x5}, {{r3}, 0xfffffffffffffffa}, {{r7}, 0x3}, {{r8}, 0x5}, {{r9}, 0x6}, {{r10}, 0x2}, {{r1}, 0x1000}]})

10:43:01 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC], @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="75f17af84ae84270c374b31c92f2765228e39493fb0bb2f0ed56cf8fdc034230dd8576317ab30d6996f65bf6cd857e443631cc77d57c1d38455c3a22dfcfec43bc7421f0b0060569a73b7ba81375761c770d791e020e51639e7966d8c41d58be8e6cc74067714b7dbde3dc7ea55bfc19286f1a5bb5dcf775ac088fb1d50387a54cdb881b42bf60c145cb7ed0d6fec8e93e216d8ab39d344bfd58e2a522"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0x10, 0x0)

10:43:01 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
setreuid(r2, r4)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x0, 0x0, [{}]})

10:43:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x40004)

10:43:01 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x2, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:01 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1679.112469][ T2027] tmpfs: Bad value for 'size'
[ 1679.136869][ T2031] overlayfs: unrecognized mount option "lowY6å¯õ¦Sbus" or missing value
[ 1679.180771][ T2033] overlayfs: unrecognized mount option "00000000000000000000000À" or missing value
[ 1679.202324][ T2027] tmpfs: Bad value for 'size'
10:43:01 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x48000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1679.271527][   T28] audit: type=1804 audit(1581676981.499:1350): pid=2034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1741/bus/file0" dev="overlay" ino=17027 res=1
10:43:01 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
sendmsg$alg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="a354c48271002e219472a1112179da9fbd6137c2eba1e178b707d6f693c8c1fa7effb0edff89165c05462374c67d66532f84322fb59fc98e49bd6aeb634fb9279c4df986a329b38975762fbb0703bd45ef2927c3c4484152abc71089f8f6ceb24d6878c247e757fe99", 0x69}, {&(0x7f0000000300)="e8e56c3a4a0703a3b6195e6f9f6980c233f862236e846689e9e430ec6255acd4cab1d8ea75eae76cf20021fe2ebef2c0922d3dfe00cb8f518e396482b825d7b76611fa201676244aea9dd42c25a65160638b638aa895450bd982587bd9da93125bb80271d1e9c4674480eee000a1fd910453f589d5cbac322d9f6327ab0173e8934897a6a1695b11410e906006bd068444977b7696dcac692e51afbc552f3a7018c854ac772d42e8f0fd247c957fcccb98", 0xb1}, {&(0x7f0000000400)="7e7b7539c5dfc66879d1fad27d244ddc0d8385362f6f33e7c67cf3b4fdaba61294aecc2eb3263a1022ce7b3185d7ee6e5bc208c247c2defed3819e97ad490bb4f63b7a7484a1c571cfc11e21947ad9aa5341f7babdada8da40442c27b463606231d007bfb2e126f3c0e27525296b7884e3f70123da79", 0x76}, {&(0x7f0000000480)="22a845a0677fe6b83f798b29c53dd92b8639f753360332a95cd73469f2fa00ea8c058fc3453391f089902a09253c48945583503c35c1e775fec93e150b3a2eaeb3b8d10d46d55e05fb8659ae9a912b00f0f9c652abfbc45601d00d843901b6e38db5c331795291bac4459c4e1ae4acbc6001534258fb6462f6f77ba37c2f6a01272e643bc7bcc698d1967af1f4f771c0320eb11e66146164e65c5b91fa51c1987ff1098ccabd011e55dc77659e4766dda40cba002f9228", 0xb7}, {&(0x7f0000000540)="0304b63e361eb0ce9854494192c320447ac276e472717592bf1188e9c8152efe6515651a7d78a6b7b1ea557457aa042ef644d30aae2064b9f3a51ab690e764ffbd5f7b7070b12aced974e29214d1dc7ea54c8d030b36e7deaf495eac6e0fdf023ed36a17e8a13c0f32ee22e8509a211f1e1cc1f0930cda3eed752f807d99f32d46436894dbb11418b6489e59306cdb87b22346f79d835a878383e6314a49ec67795acf99bfe9f3b18bf390aafb90e5525e46e8bcbadcba451cd42c9a6907df0f2f3a22470a530dc165dfa6e3a3faa801d1fdfcf80945943a891d3d39", 0xdc}, {&(0x7f0000000640)="39dafbdfd5f713bec4120414efe92c10198afaf521fcc30c68845123715e6a7a661e85f6fe4d23e32951527ca628058daa0b55b47294665921e761a9f6b9bf05093577e6f379f23d412be077fe67448b67c345dbcd944e727935d53832", 0x5d}, {&(0x7f0000000140)="3a5e6677bbd02a1418b69f4b2d4b3fb392b3e39a8c923e2d5c54b16351eed6da9ec6682b8cd78cd57e8bf85413a3aa8a", 0x30}, {&(0x7f00000006c0)="99dbe7a9bf5ea4acc7cc3c9192dcdcccc49b31d83901f251d592b14da1b3df286a5c55be273a4121c0233c286dfe622cb906aebf2ca028ea02cce98ac278903e97a9c54523eb04c2f7c35358671abc5140e9a647e14a086108be8bf2970a1855766bdc5fd65efd9aa08d58a1c3e616dc382aa6bcfd6647d0f39b3e8836b7e7758c0ad6e80d8416be00d946ebfd1e9ec4fcab048a78d09afea4b52b22af16b5396aa3baad25366ca94de0081efc094e87851f74bc94be5cae1e6f8f8a567ffb296e58b3ac00ef6091f5d8634ea1e6f9bd969d66133f7c0500923950d8b8a89f", 0xdf}, {&(0x7f0000000ac0)="987537cf19e631730f8c1bb7976922d0ab420dc6b19df2f5140f1a54613c4c9dfd4c1f949013e11d29d2a8ef69ecf916548e617148f9211f7740c08921b0d672bc95912ca60d076579164d5e135b98db0d7f8c00ae23b3d4f418a6124bf030c43d969ddbe9869771dcc98d004cfa56804b015555d926ab475e757786367d41d4f58185cfbf38e286577e1fde4e81ea511cf1778ca69cf3d1f93329760a5cd4d5ae014380e92d023ee42bf0af11b60f4bf4c9999978a768fc692b3e5c648780b788bfcf94a5c6980dbc0b32df50d78074f6c86e8a16128df0dab01fcd064a", 0xde}], 0x9, &(0x7f0000000bc0)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xd7e}], 0x60, 0x400c000}, 0x200000c0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000a40)={0x400000, 0x5, 0x4, 0x2000000, 0x0, {}, {0x3, 0x0, 0x1, 0x5, 0x4, 0x0, "996ba79d"}, 0x8, 0x1, @userptr=0x200, 0x1, 0x0, <r2=>r1})
ioctl$KDENABIO(r2, 0x4b36)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:01 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x11a)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x108)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f72b96469723d2e2f66696c65312c75707065fdff69723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000140)=0xffff0000)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0x10, 0x0)

10:43:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x41000)

[ 1679.443300][   T28] audit: type=1804 audit(1581676981.549:1351): pid=2033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1992/bus/file0" dev="sda1" ino=17115 res=1
[ 1679.565830][ T2232] tmpfs: Bad value for 'size'
[ 1679.692217][ T2232] tmpfs: Bad value for 'size'
10:43:02 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4c000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:02 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = socket$inet(0x15, 0x4, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:43:02 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file1\x00', 0x8, 0x2)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x8000000)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)={0x0, 0xfffffffffffffffa})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r8, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r8, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r8, 0x0, r6, 0x0, 0x10000, 0x0)
bind$alg(r6, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0xffffffffffffff39)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r9 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r9, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r9, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r9, 0x0, r4, 0x0, 0x10000, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)={0x48, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1={0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}}, 0x0)
r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x80800, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x58, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc0}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

[ 1680.008773][ T2421] tmpfs: Bad value for 'size'
[ 1680.075540][ T2421] tmpfs: Bad value for 'size'
10:43:02 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x42000)

[ 1680.159918][   T28] audit: type=1804 audit(1581676982.389:1352): pid=2461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1742/bus/file0" dev="overlay" ino=16834 res=1
10:43:02 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x900002, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

[ 1680.248903][ T2544] overlayfs: './file0' not a directory
[ 1680.276194][ T2534] overlayfs: failed to resolve './file0': -2
[ 1680.398268][   T28] audit: type=1804 audit(1581676982.629:1353): pid=2544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1742/bus/bus/file0" dev="overlay" ino=16555 res=1
[ 1680.694482][   T28] audit: type=1804 audit(1581676982.919:1354): pid=2585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1905/bus/file0" dev="sda1" ino=16563 res=1
10:43:03 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x3, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:03 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x60000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:03 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/226, 0xe2}], 0x3}, 0x102)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:03 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c653045574e5268c4ca1c05beb053161a1895755b9c6a5ec16759a130988488ab7ee61b6b87c840405c9a045ca18f54bf85af478de82f0381b707b0743870a45b71cb4a06c60d9182e9e8bfc23980093553ca112792d5a96804e629ac7c9ab3b7654460e070804406be2992a85d81c517303f4fe479a98c68b3a863c3d26a551d"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:03 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
exit_group(0x6)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:43:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43000)

[ 1681.550074][   T28] audit: type=1804 audit(1581676983.779:1355): pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1743/bus/file0" dev="overlay" ino=16632 res=1
[ 1681.576495][ T2812] tmpfs: Bad value for 'size'
10:43:03 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000300)='.\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x2000400, &(0x7f0000000380)='aead\x00')
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000580))
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000002380)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file1\x00'}, 0x6e)
getpeername(r1, &(0x7f00000004c0)=@tipc=@id, &(0x7f0000000540)=0x80)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32])
chdir(&(0x7f00000002c0)='./bus\x00')
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r5 = socket$inet(0x15, 0xa, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000003c0)=""/160, &(0x7f0000000480)=0xa0)
ioctl$FIDEDUPERANGE(r4, 0x10, 0x0)

[ 1681.652700][   T28] audit: type=1804 audit(1581676983.879:1356): pid=2820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1743/bus/file0" dev="overlay" ino=16632 res=1
[ 1681.675896][ T2823] overlayfs: failed to resolve './file0EWNRhÄʾ°S•u[œj^ÁgY¡0˜„ˆ«~æk‡È@@š¡�T¿…¯G�è/�·°t8p¤[qËJÆ
‘‚éè¿Â9€	5SÊ'’Õ©hæ)¬|š³·eD`àp€D¾)’¨]�Å0?Oäy©Œh³¨cÃÒjU': -2
[ 1681.682448][ T2812] tmpfs: Bad value for 'size'
[ 1681.797927][ T2969] rpc_pipefs: Unknown parameter 'aead'
[ 1681.831356][ T2839] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value
10:43:04 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x40a00, 0x100)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f627573a81b17bcb1e19d4114f4042c776f726b6469723d2e2f66696c65312c757070657266020000000027699165aa"])
mkdir(&(0x7f0000000200)='./file0\x00', 0x14)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'batadv0\x00', {0x80}, 0x5})
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x8000000, 0x1, 0x0, 0x0, [{{}, 0x1}]})

[ 1681.876318][ T2969] rpc_pipefs: Unknown parameter 'aead'
10:43:04 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x68000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:04 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000, &(0x7f0000000100)=ANY=[@ANYRESHEX])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x8000000003})

[ 1681.963131][ T2969] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value
10:43:04 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43100)

10:43:04 executing program 2:
mkdir(&(0x7f0000000240)='./bus\x00', 0xc2)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
getpeername$unix(r0, &(0x7f00000001c0), &(0x7f00000000c0)=0x6e)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x1080, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0x10, 0x0)

[ 1682.174722][ T3164] overlayfs: unrecognized mount option "upperf" or missing value
[ 1682.185514][ T3172] tmpfs: Bad value for 'size'
[ 1682.293907][ T3172] tmpfs: Bad value for 'size'
[ 1682.326860][   T28] audit: type=1804 audit(1581676984.559:1357): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1744/bus/file0" dev="sda1" ino=16725 res=1
[ 1682.333078][ T3176] overlayfs: unrecognized mount option "0xffffffffffffffff" or missing value
[ 1682.422415][   T28] audit: type=1804 audit(1581676984.639:1358): pid=3178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1997/bus/file0" dev="sda1" ino=16740 res=1
[ 1682.477385][   T28] audit: type=1804 audit(1581676984.699:1359): pid=3182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1997/bus/bus/file0" dev="sda1" ino=16516 res=1
[ 1682.555669][   T28] audit: type=1804 audit(1581676984.769:1360): pid=3176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1907/bus/file0" dev="sda1" ino=16565 res=1
[ 1682.838940][ T3175] overlayfs: unrecognized mount option "upperf" or missing value
[ 1682.905115][   T28] audit: type=1804 audit(1581676985.129:1361): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1744/bus/bus/file0" dev="sda1" ino=16632 res=1
10:43:05 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x4, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:05 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6c000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:05 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

10:43:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43200)

10:43:05 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus\x00', 0x80)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@iv={0x0, 0x117, 0x2, 0x50, "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"}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
inotify_init1(0x0)
r4 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r5 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r6 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
splice(r6, 0x0, r5, 0x0, 0x10000, 0x4)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000340)={{{0x5}}, 0x18, 0xdf, &(0x7f0000000300)="f683684ef76cea1ea91546fd2857c97a783e9b84a572b736"})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x301100, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x4800, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0xfffffffffffffe6e)
r8 = accept$alg(r7, 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r11 = accept$alg(r10, 0x0, 0x0)
sendmsg$alg(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r11, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r11, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r11, 0x0, r9, 0x0, 0x10000, 0x0)
sendmsg$alg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x40)
write$binfmt_script(r8, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r8, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r8, 0x0, r0, 0x0, 0x10000, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000400)=""/221)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x1b, &(0x7f0000000140)={@loopback}, 0x20)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r13 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r13, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:05 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="0000002000000000000000000000000010000c0000000000", @ANYRES32, @ANYBLOB="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"])

[ 1683.107162][ T3402] tmpfs: Bad value for 'size'
[ 1683.171415][   T28] audit: type=1804 audit(1581676985.399:1362): pid=3401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1745/bus/file0" dev="sda1" ino=17118 res=1
[ 1683.200266][   T28] audit: type=1804 audit(1581676985.409:1363): pid=3400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1998/bus/file0" dev="sda1" ino=17105 res=1
[ 1683.231137][   T28] audit: type=1804 audit(1581676985.449:1364): pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/1998/bus/file0" dev="sda1" ino=17105 res=1
[ 1683.240251][ T3408] overlayfs: './file0' not a directory
[ 1683.278504][ T3402] tmpfs: Bad value for 'size'
10:43:05 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:43:05 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x74000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43402)

10:43:05 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d0e2f66696c65306485e6da964c8905c192f26d2a45749dcb8ec8"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
splice(r5, 0x0, r3, 0x0, 0x10000, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x40, 0x40)
ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000200)={0x2})
r7 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r7, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r7, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r7, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f00000000c0)=@netrom)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller1\x00'})

10:43:05 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$afs(&(0x7f00000000c0)='afs\x00', &(0x7f0000000140)='./file0\x00', 0x8b63, 0x6, &(0x7f0000000740)=[{&(0x7f0000000400)="3301090ae83bb408085f08c33401c1931ce1153c5e058596a005d864786bf520275c675058312ff0bb540fe03ab1d0b9e911bff12f90e2a8fad0273b8c198d2c6db6fa20d15f770a7cf61a63ec6df39b39498582a10d879f864319221acfab8c58e32028dd82fe0886807cd9232e8b0ecc9421f02096e906197cd9878005172237f2884e1b47a28deed72986565299b0813b1403a09a3b0a2c11d5bff1b8624041eae5b64d8909e1592ca0603a159292e10f5ad54d14b118516c23de567b215978269d1da1ec439b1c111e2391647ce75914ab310aec46705c1afec9d907af21c6c7642a350eedfa826729aa1a24bc27c3232e1627b7ed67c28d2372c500d2", 0xff, 0xffff}, {&(0x7f00000001c0)="9bf741eb4f079191300b9ea376a748275706325866122e159f561e468ace98e44d3e99da4deff38b90708ed028215e86b4804adf3ee65097cbf5afca2991ec082ba32dff35f94c171e717cee50a5d21e22a2f20ee4d035d09c951804f7123b6325e55c38750339ca", 0x68, 0x10001}, {&(0x7f0000000300)="f2e3df5634c99f446a273e9656786afb8806accbd5179abdc716b9aad9973bf9f8ed45978244015b57e24c1e2067edac898e5d30ab7e4b739f23b33c4fd5775455d22bf9de51d6502cca1e187c20cef1e067670dcd11dfd4c9344b20dc4f713f57db5918121174d5c981df1a4fa6962d41e856cc0005fecc927804408214a685b73616d34f713b40e471f73f2c17058fb79c918590ce12f7d169d804b62b8251f165010426b8", 0xa6, 0x76f29a36}, {&(0x7f0000000500)="7c8dda2867cc989a13c98c2374cd3414f8ad77c6fa16cac24114367d9cd5f855ac61c35f4c9781a4069d45e1916b7fd967722161f87f18287b642904aedb7e2b662610a66351b1b1d1760a7ca8dc69fd49d4a36a24", 0x55, 0x5}, {&(0x7f0000000580)="fd6907b6d21e9126edb3b0035b57cf79fe733b22c492c658028551b8e7e71921e41332135bdab38b1d7e4ae1da8459a5bfee30c6aca92cdc38d62e94c700363b585bf8d12ef65985ec1e6a721cebb40283394aca68e76d25f049d15d185092c26a3d4968dd31acb1c392afe9cd2279555ad3a80300d90e2e4146e9b249c68e49636dd32617702b66e2534b9bb9be0bf1446871b295f20da6ea473895ee0ac4475148937014f765800d11830d24161e8e32ed95651f569489492e93fdc448d77a1ef6355dbf12d133eebe39f9d868cb23e55f621cc8716296f96638eb624a33a8492d63c1c4b67ab3f2298bb7ccf10c722c05e1b083cd", 0xf6, 0xffffffff00000000}, {&(0x7f0000000680)="61f51b02d797c397f6b4d2b5c3915a6d7cb2e951951105e1beb8a960ce84e9bc822a166922f98c137021f6cda6388ceb3f06b6242240aae85bba1363e5d1969509e5d48dfe22ac66a7c3ee0f718e0ee3effe4ddcb1842a2325318892b1b3412c6d7ec1517734bd84bfae10e716c22a2afd633636ae74b4f1b31eea9236eb42e143065c366030848c7ab5e60c65861663c1b8c3a551114f7d3c337f16b9d23b2cbf36", 0xa2, 0x200}], 0x8, &(0x7f0000000800)={[{@flock_write='flock=write'}, {@source={'source'}}, {@dyn='dyn'}, {@flock_openafs='flock=openafs'}], [{@dont_hash='dont_hash'}, {@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}]})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000000000000000000900"/24])

[ 1683.565002][ T3785] tmpfs: Bad value for 'size'
[ 1683.643499][ T3785] tmpfs: Bad value for 'size'
[ 1683.695568][ T3788] overlayfs: './file0' not a directory
10:43:06 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7a000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1683.852398][ T3821] overlayfs: failed to resolve '/file0d…æÚ–L‰Á’òm*Et�ËŽÈ': -2
[ 1684.007741][ T4007] tmpfs: Bad value for 'size'
[ 1684.116958][ T4007] tmpfs: Bad value for 'size'
10:43:06 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x5, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:06 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x20a)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:43:06 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43403)

10:43:06 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000500)={0xa20000, 0x6, 0xffff, <r1=>0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x9a0918, 0x6, [], @value64=0x800}})
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000540))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000480)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x1298}, 0x1, 0x0, 0x0, 0x40000}, 0x4040)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x5, &(0x7f0000000380))
ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x3, 0x0, {r7}, {<r8=>0xffffffffffffffff}, 0x5, 0x9})
clock_gettime(0x0, &(0x7f0000000580)={<r9=>0x0, <r10=>0x0})
r11 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)={0x7f, 0xb, 0x4, 0x2000000, 0xfffffffb, {r9, r10/1000+30000}, {0x2, 0x1, 0x0, 0x5, 0x40, 0x0, "38281091"}, 0xffff, 0x1, @fd, 0x20, 0x0, <r12=>r11})
getsockopt$netrom_NETROM_T4(r12, 0x103, 0x6, &(0x7f0000000640)=0x6, &(0x7f0000000680)=0x4)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x120002, &(0x7f0000000300)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x2}}, {@aname={'aname', 0x3d, 'overlay\x00'}}], [{@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>', r3}}, {@measure='measure'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_lt={'fowner<'}}, {@fowner_gt={'fowner>', r8}}]}})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:06 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:06 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRES64])
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
chdir(&(0x7f00000002c0)='./bus\x00')
setxattr$security_evm(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "6fddb4cc8eb9aeb2c4c618ff78746779eb0d81dc"}, 0x15, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB="c3af000000000000000000f5aad08c003e0000cb4f3255ac6d83b1a8e45e0465030000000000", @ANYRES32, @ANYBLOB='\x00'/28])

10:43:06 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='9p\x00', 0x10000, &(0x7f0000000440)={'trans=unix,', {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@debug={'debug', 0x3d, 0x80000001}}, {@cache_loose='cache=loose'}, {@version_L='version=9p2000.L'}, {@aname={'aname', 0x3d, 'bdevcpuset/%)'}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@access_user='access=user'}, {@posixacl='posixacl'}], [{@obj_user={'obj_user'}}, {@subj_user={'subj_user', 0x3d, 'vmnet1wlan1-'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fowner_lt={'fowner<'}}, {@fsname={'fsname', 0x3d, 'aegis128-generic\x00'}}, {@pcr={'pcr', 0x3d, 0x34}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%('}}, {@smackfsroot={'smackfsroot', 0x3d, ')'}}]}})
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0x10, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r5, 0x0, r3, 0x0, 0x10000, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@deltaction={0x98, 0x31, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000084}, 0x45)

[ 1684.600559][ T4032] overlayfs: './file0' not a directory
[ 1684.624888][ T4029] overlayfs: unrecognized mount option "0000000000000000000000318446744073709551615ÿÿÿÿÿÿÿÿ" or missing value
10:43:06 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x97ffffff, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:07 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = memfd_create(&(0x7f00000003c0)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd&\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sNL\\\xc0\xe7ZX\x8d\xddx\xc6\xb6P\x1d\xfd\x90\xd1l@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\x0f\xfeA\x02Y%j\x04n\xe3\xa0\x03\xde\xd5\xfb\xb8\xdc\x18`\xd1S\x85\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xb3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(=\xafVD6BR\xfd\x97P\xd7nD\xcf\xba\xf7\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\x02\x00\x00\x00m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*-/\xa0\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u\x00\x00\x00\x00\x00\x00\x00\x00Y\xca\x90\xa7?\xe4X\xaf-d\xca\xa7Q\xae\xe0 \xbc\x10\xde{,\xc3\x11\xdfK\xf9KT\v\x8d\xce\xffZ\x03bb\x01h\xeb\x8fI\xc4\xed\xb9ib\xc4\x05%\x90\x85\xed\xfe\xde\xb3m\xb3\xe8\xb5\xdc\nZ\x80\x10c\x988IW(\x8c^\x95f\xae\xae', 0x0)
ftruncate(r0, 0x1000000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2e, 0x14c)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x4, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xeefffdeb)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:07 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xbc100000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:07 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43404)

10:43:07 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = semget$private(0x0, 0x2000000010a, 0x0)
semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x1000}, {0x0, 0xffffffff}], 0x2)
semop(r0, &(0x7f0000000000)=[{0x0, 0x480}, {0x0, 0x4, 0x1400}], 0x2)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000001c0)=""/58)
r1 = socket$inet(0x15, 0x5, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x74, 0x0, 0x7, 0x301, 0x0, 0x0, {0x4, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe46}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5921}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040084}, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r3 = dup2(0xffffffffffffffff, r1)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000140)=0x1e)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c40ca7065726469723d2e2f66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000003c0)={0xfffffffffffffffa, 0x0, 0x1, 0x0, 0x0, [{{r5}, 0xfffffffffffffffe}]})

[ 1685.297747][ T4279] overlayfs: unrecognized mount option "@Êperdir=./file0" or missing value
[ 1685.378797][ T4281] overlayfs: unrecognized mount option "@Êperdir=./file0" or missing value
10:43:08 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:08 executing program 2:
mkdir(&(0x7f00000000c0)='./file1\x00', 0x187)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
listxattr(&(0x7f0000000400)='./file2\x00', &(0x7f0000000440)=""/109, 0x6d)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200))
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726418723d2e2f66696c653048bb09ab53f48f8c1ee662cb8d544d0785454afd0542908a4fb85034aa9d239468211d30c6f3076274b89aab0770395dc087b5bcac4ae51aec0da79ea4dd63063bc1f6e75aefa9b0725adc4f81956a74ba3828e9038c6c526b8f9128c6e09f799a5bc8a0eb63dac1d89475742d921f10d66daec0ac7220bc46742fd57041f5e2f017ba84bd0509ecc6d3e018ee92c8d62ec4ee00a519b3ba018954c2061e81217458"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
chmod(&(0x7f00000001c0)='./bus\x00', 0x1a0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)
open(&(0x7f0000000140)='./file2\x00', 0x2200, 0x1)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r4, 0x0, r2, 0x0, 0x10000, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x3, 0x101, 0x1, 0x9, 0x1, 0x8, 0x800, 0x2b}, 0x20)

10:43:08 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x1d6)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000400"/28])

10:43:08 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x56, 0x1, 0x1f, "29b13981a0cd4a0dcc6f9e09b39957a5", "a762ee43b156bab770b242f12ea0fa42615e532581ed9b5fd01861b9294db27997a860cde3406b9bbf536be167ba9ef643d1d0b348d252d25585b5d36431f91e4e"}, 0x56, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x6, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43405)

[ 1686.058199][ T4604] tmpfs: Bad value for 'size'
10:43:08 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
mount$overlay(0x400000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES64=0x0])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1686.128396][ T4608] overlayfs: './file0' not a directory
[ 1686.179275][ T4661] overlayfs: unrecognized mount option "upperdr=./file0H»	«Sô�ŒæbË�TM…EJýB�ŠO¸P4ª�#”h!0Æóbt¸š«p9]À‡µ¼¬Jåì
§ž¤Ýc;ÁöçZï©°rZÜO�•jtº8(éŒlRk�‘(ÆàŸyš[È ëcÚÁØ”ut-’Öm®À¬r ¼Ft/ÕpAõâ𺄽	ìÆÓàî’ÈÖ.Äî" or missing value
[ 1686.208745][ T4604] tmpfs: Bad value for 'size'
10:43:08 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:08 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file1\x00', 0xdffdd61441048c9e, 0xf7)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43406)

[ 1686.419626][ T4821] overlayfs: unrecognized mount option "00000000000000000000003" or missing value
[ 1686.447715][ T4661] overlayfs: unrecognized mount option "upperdr=./file0H»	«Sô�ŒæbË�TM…EJýB�ŠO¸P4ª�#”h!0Æóbt¸š«p9]À‡µ¼¬Jåì
§ž¤Ýc;ÁöçZï©°rZÜO�•jtº8(éŒlRk�‘(ÆàŸyš[È ëcÚÁØ”ut-’Öm®À¬r ¼Ft/ÕpAõâ𺄽	ìÆÓàî’ÈÖ.Äî" or missing value
[ 1686.558576][ T4823] overlayfs: unrecognized mount option "00000000000000000000003" or missing value
10:43:08 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x14)
write$selinux_attr(r1, &(0x7f0000000300)='/usr/sbin/ntpd\x00', 0xf)
r2 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
mount$overlay(0x400000, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r0])
getsockname$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @bcast}, [@bcast, @netrom, @default, @remote, @netrom, @remote, @netrom, @default]}, &(0x7f0000000000)=0x48)
chdir(&(0x7f00000002c0)='./bus\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @dev}, &(0x7f00000001c0)=0xc)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r4, 0x10, 0x0)
creat(&(0x7f0000000400)='./file1/file0\x00', 0x2)

[ 1686.649007][ T4834] overlayfs: missing 'lowerdir'
10:43:08 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0])
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
r3 = accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80800)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec95248c32e27d04000000008a", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r8, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r8, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
r9 = accept$alg(r6, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@iv={0x20, 0x117, 0x2, 0x7, "63bfa5b31572b0"}], 0x20}, 0x40000)
write$binfmt_script(r9, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r9, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f0000000500)=""/141, 0x8d}], 0x4}}], 0x1, 0x2000, 0x0)
splice(r9, 0x0, r4, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r12 = accept$alg(r11, 0x0, 0x0)
sendmsg$alg(r12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r12, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r12, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10020, 0x0)
splice(r12, 0x0, r10, 0x0, 0x10000, 0x0)
write$FUSE_STATFS(r10, &(0x7f0000000400)={0x60, 0x0, 0x3, {{0x5, 0x1, 0x100000000, 0x6, 0x0, 0x5, 0x5, 0x8}}}, 0x2c)
getsockname(r3, &(0x7f0000000300)=@alg, &(0x7f0000000200)=0x80)
chdir(&(0x7f00000002c0)='./bus\x00')
r13 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r14 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r13, 0xc01c64a3, &(0x7f00000000c0)={0x2, 0x10001, 0x4, 0x1, 0x8, 0x6, 0xf1b})
ioctl$FIDEDUPERANGE(r14, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000eaffffffffffff3d00000000000000", @ANYRES32, @ANYBLOB='\x00'/28])

10:43:08 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfcfdffff, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:09 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r0])
chdir(&(0x7f00000002c0)='./bus\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f0000000200)=0x80, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x6, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000300)="e4ab10d6611b533df68cb48e7557e902fa543c6b411d51c4bc51118dc08e790b944abf84960b16290b6dfcee60463ef2aab3ac3b44d7807e3060497beda2276d94e08f9d9dd2a418859b4c1acedc046122c11e40add784ac5e44fca318f4accd7c6bb5c7c1a2c160f47388504d6eb2196be03dd3031f3dcaf58efd41cf7a4db753bf958349980ab41a2c3fbdcdb61f4abf2e", 0xfffffcdf}], 0x100000, &(0x7f0000000580)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r2, @ANYBLOB="2c75690400", @ANYRESHEX=r4, @ANYBLOB=',errors=continue,fmask=00000000000000000160453,gid=', @ANYRESHEX, @ANYBLOB="2c736d63676b6673720000e9acb1e20ae9318601e0134c6a68a4f92fd7e4867aff72f29c9dd52d404b7c5b2dae53512c7d630732ae0bdada2fd73b9f158d522649d3df05ed1f7598a06794c7b1f1916182feaf713b000df67b9d2ca3b5c8e993541cfd62419eb499022bbc5ae19520b06a3b3dfc3aa850a6279d1cc595728110fae66a052cce5f23c2d0ee8df16c87998ad671c66a1090616bbf921029f9be0900"])
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYRES16=r6])

[ 1686.916265][ T4946] overlayfs: missing 'lowerdir'
[ 1686.969380][ T4947] overlayfs: unrecognized mount option "000000000000000000000040x0000000000000003" or missing value
10:43:09 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfdfdffff, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1687.036510][   T28] kauditd_printk_skb: 12 callbacks suppressed
[ 1687.036529][   T28] audit: type=1804 audit(1581676989.269:1377): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2003/bus/file0" dev="sda1" ino=17126 res=1
[ 1687.061554][ T4955] overlayfs: unrecognized mount option "" or missing value
[ 1687.111911][ T4956] overlayfs: unrecognized mount option "000000000000000000000040x0000000000000003" or missing value
10:43:09 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
mq_getsetattr(r0, &(0x7f00000000c0)={0x9, 0x1ff, 0x4, 0x5}, &(0x7f0000000140))
clock_getres(0x5, &(0x7f00000001c0))
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
r5 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
sendmmsg(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x6}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)="de22dc34885a6dd3ad76f1c077d36b32efd6d8eec31bd0c0b243c7e78221c2268c1bafadcb1bccb47972ca136c02de85bb128936d23c5a28abca28185f28812f191f93a3c126280ab286c98d1d794de5b7dd1a2b21b31c0c498db6f745fb69cce80d74726cc9ec4e909ee5959149718a7d57d36607d888c13dc980c96154ccbc21cad17ef6a5c3f4aebb847b8e367f7b480bdf2e4104fdebaa0b5523123218551445535bcee318ae05eae2293b173a6f95666f4c3e202ae169354670cde0a6e164d599fc4b03f4326be650badc009b493adcd1896371ba0461c4d11d2d8fcf441afec8768be2b845505fbdaa75", 0xed}, {&(0x7f0000000480)="141f345a2495a37319b72d2392d7b5e011c6866b8957c130e892343eebd42af00f36bbbab46f1289ed69d79afe170eefd6be3ad8c766bb40c38f43cff90d13acbf1be616305bf646eca0251b2f2040fe22bf93a2", 0x54}, {&(0x7f0000000500)="e4f984c4524a7925630958db2219bd6ad07e9891b3d9d9fcbe774e537c96c645de533644386b5e99e79d8a656063d8c46bece683e2a20ea112fba525066ad398a2803a264c7e7a12325101c531b8ee65a95d2230ecc04f7e3b8c60864f5810aff70659dc664d47bf93d265386d", 0x6d}, {&(0x7f0000000580)="8dd605afd0ea89b5907e187c9ab2a7f980b7ddc747d6a6e3ae6be169e0e8bc9f24942538a455d02ae08987b8dd95df7a9fea56bd05a83d5d796c17865a6189774c90b780e83e818f7804dc1e42890872b8d14efdcf96248ba5d62585cd50d1a18ed73cf9429720e4ca29e16959aa6c93c2cff49408424a8acadf0550cca5601925b485c1c1e82b5731da5d4049cc9934d51651d24e57f4a738a3da6b10c7b2311de4e4550de926670386e68c647d869017476f590987440bec94503c16976686f7211b1ec65a2d8425024d37307b308d3edeb7faefe580935d2585dbf842", 0xde}, {&(0x7f0000000680)="6da9528675ffaa2b52e5a48758e1f8182f27b04d660e343618a78ba803741cf984bc512161b614a8a046d8a53645266e2bbc9b41195b1432e8517f83733a68364938a6", 0x43}, {&(0x7f0000000700)="6304783c606085abb14ddf19a1c7dbd44c73eb69b6fae193ca25aa3f7ad037c09272bfbf73543d7a387c3673e0bcff79f024de73295d63b3e9dbee18becab03d05ef7a7022d0d045030c7528f7d64233691fa7fa6bccca6470f487a011c197128fa4c9a87cdbae5ea669847230377f6a7f6b500eb865df700d4d8d437564260dd5b9fe2a46f46788e31aaf192241e21417763941a040d38f107e811e0a57219633e2aa", 0xa3}, {&(0x7f0000000200)="7c53a749", 0x4}], 0x7}}, {{&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @rand_addr=0x3}, 0x1, 0x3, 0x4, 0x1}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="ae9a656f0c82a61f9e70c3bd476092e329c59be6741ba2717ec5090e793dfcc586a96d1450bb08e69495080ccace99e56277f405612dbe0db3f14d984fb4f897831d34fc29fb7bc203b44ca13f19e4dd0e3ae424f79dea752f0eb992f58cab07e7659062f3a9e4a34ec79b7aba553782c17c2ff25eb567e0a1b27ec231a7a069535a74e7511f0bd0ae3f5ca889750357f11790afde4d4cf85746c4703c1438ebfd", 0xa1}, {&(0x7f0000000980)="8ca3f124d71cd00cdb056385fa9c47874f986a75113d9d657661357e1944671260213c6e67d020ce1fd9b082d12d6ae2d4b476eb8b58f95a5689ee3515144127eadeb0de6b51165db77c23ceae3f5d124c50d7d5a648076d5b9f72778118be67fa271b9bb30a374bbc0d4f71996b61dcc32a", 0x72}, {&(0x7f0000000a00)="e747784bdd247b90f7fcc7a8d7e86bb12475afd6c224b5bfe524e8738e147c2ea7658d1f41b6e9e6adda2beaefe2614c8057804d965fb0157c0a78f99f66bfc188eec8af341baec8ad5d26e7fe28c5ab2f375f49d0181bd1f9cd8412c6feb7b1887a025f51cc1ebf4a268c0c6997d9ad1546d966356209f50f3e9abd963464380a1dd5cfdc5be801f2870a5080daf53d1431ad34a1eadbefe19093a7b36dfc63c825494a1552cf16a1d776a7d0970a0623bc026c1d13abc8f4", 0xb9}, {&(0x7f0000000ac0)="2e203143b1230ab1f753cb78a644d72910f1b76b7134f3034631a445ae", 0x1d}, {&(0x7f0000000b00)="518c5f3ccf8c11f9b8ca298b6056af3f5cf08e8779fe97c98d071cd7f855bc7bc64297f1388c6de3a54dba", 0x2b}], 0x5, &(0x7f0000002380)=[{0x78, 0x115, 0x4, "b994959886e131bbb4d6bd696b60ef7b068ea8e0a1e5c31e8036239f7f74c313ef99711684b950393e940ecf1ea932cab0380e4b7beb16fba0bf052f84453628411845746394d2418a70a78bb43eb09c46969fc53f0d1e401bad934cb99544d1f8372e95"}, {0xa0, 0x101, 0x401, "5ecce5262a0c68953859381885ab5deeb3ba6a22e6177ea83af50a03f6a72639e0a8d2407f44843d8c57bbc3ff43df9e8298134c4593362c0eb138bd85e6eea90d8766053cdbb12d28ffcf719f5aad80b54f45e208552224750848fd2fe170073b312e12f521b1b11c75637c0cdc67165d3ec4c6d2e7a647a9d101cb24df74f9fe0c20613f0ab5ddb734aa671207"}, {0x30, 0x0, 0x99d1, "68491cf952eeaaaad9adcc106b93420f80c8176b9ed53ce83db33214f555dd6c"}, {0x1010, 0x113, 0x8001, "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"}, {0x28, 0x10c, 0xf46, "74399a8041a6a436ce67b8fef8bd66da13e6bf9c86d7998e"}, {0x60, 0x113, 0xffffffff, "5834051b504475ed6e5090885aafa2a7665d829f382f52d68d73e8c9ef752cac8accc3282512e3235e553538fa46d8031764bca04fa432acdca2d33da670847449804b2c48cf468364181bec19f6"}, {0x1010, 0x109, 0x5, "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"}, {0x1010, 0x111, 0x800, "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"}], 0x3200}}, {{&(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x1f, 0x1}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)="a4f95b0f941e0f5ac15500ef00551213177ee1fc34ee3537da072920fa7e03f41767b96fb11d1cc813d80b2bcb20adfa77584cbd744d7f35bf6fc54d0023e8d72e7f1eb4fdd4c02382ad8aa4979d6e4468428a2bbebbbf44ac96db09942b48f5ca34fdcad75dde950fbd1893e0ad942b5e6afdfdf4a01a299bac4c7719923063c58e17e29c24ee2a3765a569f4a95076a74c2d043ef821c57be8235f6d563f819c7fb4872b50", 0xa6}, {&(0x7f0000000d00)="9e5f7c3112774f9de20c444484fcb163ab93c14ecdbee9d2a847fe89c5a30982596987f409cdd720b2a67437dd0485594eb2b6a09d2a918bc1a15c973d3e4b59c9300320bc4f", 0x46}], 0x2}}], 0x3, 0x240080c1)
ioctl$FIDEDUPERANGE(r3, 0x10, 0x0)

[ 1687.481975][   T28] audit: type=1804 audit(1581676989.709:1378): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2004/bus/file0" dev="sda1" ino=16791 res=1
[ 1687.530871][ T5149] overlayfs: './file0' not a directory
[ 1687.568879][   T28] audit: type=1804 audit(1581676989.779:1379): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2004/bus/bus/file0" dev="sda1" ino=16963 res=1
10:43:10 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x7, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:10 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfdffffff, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:10 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43407)

10:43:10 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:10 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0xe926, 0x5, 0x4, 0x4002000, 0x200, {r0, r1/1000+30000}, {0x1, 0x1, 0x1, 0x0, 0xfc, 0x40, "00c793db"}, 0xfffffffd, 0x4, @userptr=0xaa, 0x1, 0x0, <r2=>0xffffffffffffffff})
ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000300)=@bcast)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x400100, 0x0)
ioctl$FIDEDUPERANGE(r3, 0x10, 0x0)

10:43:10 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x11a)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1687.913713][ T5294] overlayfs: unrecognized mount option "lowerdkr=./bus" or missing value
10:43:10 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xff000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1687.960972][ T5296] overlayfs: failed to resolve './bus': -2
[ 1687.994680][   T28] audit: type=1804 audit(1581676990.219:1380): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2005/bus/file0" dev="sda1" ino=17142 res=1
10:43:10 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000300)={0x3, 0xfff8, 0x2, 0x3, 0x2, "3fa541b00982d341"})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x2e, 0x0, @tid=r2}, &(0x7f0000000140)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200))

10:43:10 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530a95bf838a87b5a2bf4e9c1e9525fbc1ade6ad283298ad73b7d0ede7392c0e6e2631b94edc406713f68cee044b5aa760b7adeb315252824dcf91d68d09876b78644737175f650df151124bcef6be92c835904b185fa050fc7d5c2a08a41cc63fb58058fe26cb9e30439c9882c0eac80417e6e2aba8105567b7e8b51c0543eb4c1631af1bb850da39cb038eea4cfb598886acb3c37ea0dd5770dc929546e"])
io_setup(0x2, &(0x7f00000000c0))
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x523400, 0x90)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
pidfd_send_signal(r0, 0x8, &(0x7f00000001c0)={0x28, 0x800, 0x8}, 0x0)

[ 1688.150747][   T28] audit: type=1804 audit(1581676990.229:1381): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1752/bus/file0" dev="sda1" ino=17141 res=1
10:43:10 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl(r0, 0x1, &(0x7f0000000400)="b2932ff6bf61dd557abefcb959c476384fde1233adf15de130a9d19754e8ebd9402e0c9816696007ec1d67e1dcc5cd900a5c679a242150dada5346766d85cf11c03e415edfa8e7cade2a8651f7b48bf7c8e5672c913e5f4832cdfd33a5c9a42901b88993d642ef83ef4b8e15bdcc2d11c31d75c81b09a9e36c73d393e567bd42333362a30b35e8a06e377f78f527a7ac4d2528364f9a16bdd0558df96526f176547c8296dc2342244f327c5bd0bc39e91457bfac8529a54a35c519ce5ec1ce86754a75f60eb8b10c74b04e60e6d5c28a82f4ba06dcd279ad8ba08b4becedc4d0")
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:10 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43408)

10:43:10 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffdfc, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1688.542822][ T5521] overlayfs: unrecognized mount option "ƒY±…úÇÕ ŠAÌcûX�âl¹ã9Ɉ" or missing value
[ 1688.622102][   T28] audit: type=1804 audit(1581676990.849:1382): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2006/bus/file0" dev="overlay" ino=16914 res=1
[ 1688.702553][ T5519] overlayfs: './file0' not a directory
[ 1688.745935][   T28] audit: type=1804 audit(1581676990.909:1383): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1916/bus/file0" dev="overlay" ino=17010 res=1
[ 1688.865312][   T28] audit: type=1804 audit(1581676991.019:1384): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2006/bus/bus/file0" dev="overlay" ino=17073 res=1
10:43:11 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x8, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:11 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffdfd, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:11 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
getpeername(r2, &(0x7f0000000400)=@nfc, &(0x7f0000000480)=0x80)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x40)
symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./bus\x00')

10:43:11 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:43:11 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43409)

10:43:11 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)

[ 1689.771964][   T28] audit: type=1804 audit(1581676991.999:1385): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2007/bus/file0" dev="overlay" ino=16977 res=1
[ 1689.779735][ T5858] overlayfs: './file0' not a directory
10:43:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f776572646903862e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469726f0a9c7d696c6530"])
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1689.819260][   T28] audit: type=1804 audit(1581676992.039:1386): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2007/bus/bus/file0" dev="overlay" ino=16616 res=1
10:43:12 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffff8c, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:12 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
sync()
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x103)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:12 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4340a)

[ 1690.146289][ T6074] overlayfs: unrecognized mount option "lowerdi†./bus" or missing value
[ 1690.161609][ T6074] overlayfs: unrecognized mount option "lowerdi†./bus" or missing value
10:43:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0xb0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x40)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
mkdir(&(0x7f0000000140)='./file1\x00', 0xd0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1690.445122][ T6099] overlayfs: missing 'lowerdir'
[ 1690.522675][ T6200] overlayfs: failed to resolve './file0': -2
10:43:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x11, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:13 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffff97, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:13 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000001c0)='./file1\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@l2={0x1f, 0x0, @fixed={[], 0x10}, 0xffff, 0x2}, {&(0x7f0000000400)=""/4096, 0x1000}, &(0x7f00000000c0), 0x6b}, 0xa0)

10:43:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4340b)

10:43:13 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, 0x50}, 0x1, 0x0, 0x0, 0x3}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000000000000000000000000000300000000000000"])

10:43:13 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x100)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

[ 1691.559115][ T6408] overlayfs: failed to resolve './file1': -2
10:43:13 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffff6, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:14 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x300, 0x1d9)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:43:14 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4340c)

10:43:14 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
mount$9p_xen(&(0x7f0000000200)='syz\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x1048c45, &(0x7f0000000500)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r1}}], [{@permit_directio='permit_directio'}, {@hash='hash'}, {@measure='measure'}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@audit='audit'}]}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x2}, 0xc)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r5, 0x0, r3, 0x0, 0x10000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c653054b05e0e79540da774ed07fafd2b5ffedfeff2905cd2b0eb2c67f55d3fbf8bbec659f59335691a14ea7de269f201c18a5e1283d2d905aac0cf4c518040c0c7e34656c55c9742d8a2aeaddeb7a380dab89f697d53ffb465536a774690dbbc8ee11ef28ba3d6433c2a549c1bddea049d38fa1c42a775c38208ef5261b10ca0c729e4945e927768a805c53f653986e5ce4f0191b19b8e55967f995cd710bc"])
chdir(&(0x7f00000002c0)='./bus\x00')
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000efc8e678ee9cf0e37962e06c1b5a587d3ea474d613c8c847530963c0a74786e255af27b7e461"])

10:43:14 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x103400, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140)=0xfffffcf2, 0x4)

[ 1692.104388][   T28] kauditd_printk_skb: 10 callbacks suppressed
[ 1692.104406][   T28] audit: type=1804 audit(1581676994.329:1397): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2011/bus/file0" dev="overlay" ino=16948 res=1
[ 1692.118608][ T6635] overlayfs: './file0' not a directory
10:43:14 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffffd, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1692.452241][   T28] audit: type=1804 audit(1581676994.679:1398): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1920/bus/file0" dev="overlay" ino=16528 res=1
10:43:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x60, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x80400)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_to_bond\x00', {}, 0x6})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0x10, 0x0)

10:43:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4340d)

10:43:15 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:15 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
execve(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000340)=[&(0x7f0000000140)='overlay\x00', &(0x7f00000001c0)='ppp1\x00', &(0x7f0000000200)='overlay\x00', &(0x7f0000000300)='\x00'], &(0x7f00000005c0)=[&(0x7f0000000380)='overlay\x00', &(0x7f0000000400)='overlay\x00', &(0x7f0000000440)='overlay\x00', &(0x7f0000000480)='overlay\x00', &(0x7f00000004c0)='overlay\x00', &(0x7f0000000500)='overlay\x00', &(0x7f0000000540)='%eth1nodevbdevwlan1vboxnet1\xdevboxnet0,}ppp0\x00', &(0x7f0000000580)='overlay\x00'])
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB='\x00'/28])

10:43:15 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0xa)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000000000000000"])

[ 1693.028106][   T28] audit: type=1804 audit(1581676995.249:1399): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1921/bus/file0" dev="overlay" ino=17028 res=1
[ 1693.126792][ T6969] 
[ 1693.129161][ T6969] ======================================================
[ 1693.136180][ T6969] WARNING: possible circular locking dependency detected
[ 1693.143208][ T6969] 5.6.0-rc1-syzkaller #0 Not tainted
[ 1693.148488][ T6969] ------------------------------------------------------
[ 1693.155617][ T6969] syz-executor.0/6969 is trying to acquire lock:
[ 1693.162138][ T6969] ffff888040df3650 (&ovl_i_mutex_dir_key[depth]){++++}, at: path_openat+0x1c1f/0x3490
[ 1693.172500][ T6969] 
[ 1693.172500][ T6969] but task is already holding lock:
[ 1693.179871][ T6969] ffff888056c12b90 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x2270
[ 1693.189960][ T6969] 
[ 1693.189960][ T6969] which lock already depends on the new lock.
[ 1693.189960][ T6969] 
[ 1693.200365][ T6969] 
[ 1693.200365][ T6969] the existing dependency chain (in reverse order) is:
[ 1693.208099][   T28] audit: type=1804 audit(1581676995.359:1400): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2012/bus/file0" dev="sda1" ino=17153 res=1
[ 1693.209375][ T6969] 
[ 1693.209375][ T6969] -> #3 (&sig->cred_guard_mutex){+.+.}:
[ 1693.209405][ T6969]        __mutex_lock+0x156/0x13c0
[ 1693.209426][ T6969]        mutex_lock_killable_nested+0x16/0x20
[ 1693.257255][ T6969]        do_io_accounting+0x1f4/0x820
10:43:15 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:15 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xfff, 0x189242)
r2 = getuid()
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x400, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@nodevmap='nodevmap'}, {@access_uid={'access', 0x3d, r2}}, {@version_L='version=9p2000.L'}, {@cache_loose='cache=loose'}, {@access_any='access=any'}, {@aname={'aname', 0x3d, 'overlay\x00'}}], [{@uid_eq={'uid', 0x3d, r4}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise='appraise'}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}})
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x3}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x20004010)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0x10, 0x0)

[ 1693.257939][   T28] audit: type=1804 audit(1581676995.359:1401): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2012/bus/bus/file0" dev="sda1" ino=16946 res=1
[ 1693.262634][ T6969]        proc_tgid_io_accounting+0x23/0x30
[ 1693.262650][ T6969]        proc_single_show+0xfd/0x1c0
[ 1693.262661][ T6969]        seq_read+0x4ca/0x1170
[ 1693.262681][ T6969]        do_iter_read+0x4a4/0x660
[ 1693.312087][ T6969]        vfs_readv+0xf0/0x160
[ 1693.316783][ T6969]        default_file_splice_read+0x4fb/0xa20
[ 1693.322876][ T6969]        do_splice_to+0x127/0x180
[ 1693.327915][ T6969]        splice_direct_to_actor+0x320/0xa30
[ 1693.333903][ T6969]        do_splice_direct+0x1da/0x2a0
[ 1693.339285][ T6969]        do_sendfile+0x597/0xd00
[ 1693.344402][ T6969]        __x64_sys_sendfile64+0x1dd/0x220
[ 1693.350273][ T6969]        do_syscall_64+0xfa/0x790
[ 1693.355300][ T6969]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1693.361705][ T6969] 
[ 1693.361705][ T6969] -> #2 (&p->lock){+.+.}:
[ 1693.368370][ T6969]        __mutex_lock+0x156/0x13c0
[ 1693.373475][ T6969]        mutex_lock_nested+0x16/0x20
[ 1693.378836][ T6969]        seq_read+0x71/0x1170
[ 1693.383606][ T6969]        proc_reg_read+0x1fc/0x2c0
[ 1693.388756][ T6969]        do_iter_read+0x4a4/0x660
[ 1693.393786][ T6969]        vfs_readv+0xf0/0x160
[ 1693.398486][ T6969]        default_file_splice_read+0x4fb/0xa20
[ 1693.404538][ T6969]        do_splice_to+0x127/0x180
[ 1693.409566][ T6969]        splice_direct_to_actor+0x320/0xa30
[ 1693.415447][ T6969]        do_splice_direct+0x1da/0x2a0
[ 1693.420816][ T6969]        do_sendfile+0x597/0xd00
[ 1693.425795][ T6969]        __x64_sys_sendfile64+0x1dd/0x220
[ 1693.431511][ T6969]        do_syscall_64+0xfa/0x790
[ 1693.436526][ T6969]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1693.442918][ T6969] 
[ 1693.442918][ T6969] -> #1 (sb_writers#4){.+.+}:
[ 1693.449935][ T6969]        __sb_start_write+0x241/0x460
[ 1693.455350][ T6969]        mnt_want_write+0x3f/0xc0
[ 1693.460468][ T6969]        ovl_want_write+0x76/0xa0
[ 1693.465566][ T6969]        ovl_create_object+0xb3/0x2c0
[ 1693.471081][ T6969]        ovl_create+0x28/0x30
[ 1693.475759][ T6969]        lookup_open+0x12d5/0x1a90
[ 1693.481140][ T6969]        path_openat+0xf2c/0x3490
[ 1693.486389][ T6969]        do_filp_open+0x192/0x260
[ 1693.491420][ T6969]        do_sys_openat2+0x5eb/0x7e0
[ 1693.496617][ T6969]        do_sys_open+0xf2/0x180
[ 1693.501601][ T6969]        __x64_sys_open+0x7e/0xc0
[ 1693.506621][ T6969]        do_syscall_64+0xfa/0x790
[ 1693.511749][ T6969]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1693.519033][ T6969] 
[ 1693.519033][ T6969] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}:
[ 1693.527185][ T6969]        __lock_acquire+0x2596/0x4a00
[ 1693.532605][ T6969]        lock_acquire+0x190/0x410
[ 1693.537686][ T6969]        down_read+0x95/0x430
[ 1693.542356][ T6969]        path_openat+0x1c1f/0x3490
[ 1693.547460][ T6969]        do_filp_open+0x192/0x260
[ 1693.552485][ T6969]        do_open_execat+0x137/0x690
[ 1693.557791][ T6969]        __do_execve_file.isra.0+0x16d5/0x2270
[ 1693.563962][ T6969]        __x64_sys_execve+0x8f/0xc0
[ 1693.569159][ T6969]        do_syscall_64+0xfa/0x790
[ 1693.574423][ T6969]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1693.580837][ T6969] 
[ 1693.580837][ T6969] other info that might help us debug this:
[ 1693.580837][ T6969] 
[ 1693.591279][ T6969] Chain exists of:
[ 1693.591279][ T6969]   &ovl_i_mutex_dir_key[depth] --> &p->lock --> &sig->cred_guard_mutex
[ 1693.591279][ T6969] 
[ 1693.605611][ T6969]  Possible unsafe locking scenario:
[ 1693.605611][ T6969] 
[ 1693.613064][ T6969]        CPU0                    CPU1
[ 1693.618432][ T6969]        ----                    ----
[ 1693.624084][ T6969]   lock(&sig->cred_guard_mutex);
[ 1693.629145][ T6969]                                lock(&p->lock);
[ 1693.635506][ T6969]                                lock(&sig->cred_guard_mutex);
[ 1693.643218][ T6969]   lock(&ovl_i_mutex_dir_key[depth]);
[ 1693.648696][ T6969] 
[ 1693.648696][ T6969]  *** DEADLOCK ***
[ 1693.648696][ T6969] 
[ 1693.657077][ T6969] 1 lock held by syz-executor.0/6969:
[ 1693.662495][ T6969]  #0: ffff888056c12b90 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x2270
[ 1693.673260][ T6969] 
[ 1693.673260][ T6969] stack backtrace:
[ 1693.679455][ T6969] CPU: 1 PID: 6969 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0
[ 1693.688142][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1693.698566][ T6969] Call Trace:
[ 1693.701858][ T6969]  dump_stack+0x197/0x210
[ 1693.706185][ T6969]  print_circular_bug.isra.0.cold+0x163/0x172
[ 1693.712247][ T6969]  check_noncircular+0x32e/0x3e0
[ 1693.717174][ T6969]  ? print_circular_bug.isra.0+0x230/0x230
[ 1693.723133][ T6969]  ? avc_has_extended_perms+0x10f0/0x10f0
[ 1693.728873][ T6969]  ? alloc_list_entry+0xc0/0xc0
[ 1693.733800][ T6969]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1693.740232][ T6969]  ? find_first_zero_bit+0x9a/0xc0
[ 1693.745558][ T6969]  __lock_acquire+0x2596/0x4a00
[ 1693.750418][ T6969]  ? find_held_lock+0x35/0x130
[ 1693.755400][ T6969]  ? mark_held_locks+0xf0/0xf0
[ 1693.760365][ T6969]  lock_acquire+0x190/0x410
[ 1693.764873][ T6969]  ? path_openat+0x1c1f/0x3490
[ 1693.769727][ T6969]  down_read+0x95/0x430
[ 1693.773872][ T6969]  ? path_openat+0x1c1f/0x3490
[ 1693.780298][ T6969]  ? down_read_killable+0x490/0x490
[ 1693.785668][ T6969]  path_openat+0x1c1f/0x3490
[ 1693.790339][ T6969]  ? path_mountpoint.isra.0+0x370/0x370
[ 1693.795916][ T6969]  ? security_prepare_creds+0x11d/0x190
[ 1693.801724][ T6969]  ? prepare_creds+0x4bd/0x6b0
[ 1693.806597][ T6969]  ? prepare_exec_creds+0x12/0xf0
[ 1693.811621][ T6969]  ? __do_execve_file.isra.0+0x393/0x2270
[ 1693.817520][ T6969]  ? __x64_sys_execve+0x8f/0xc0
[ 1693.822506][ T6969]  ? do_syscall_64+0xfa/0x790
[ 1693.827174][ T6969]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1693.833623][ T6969]  ? __kasan_check_read+0x11/0x20
[ 1693.838799][ T6969]  ? __lock_acquire+0x8a0/0x4a00
[ 1693.843829][ T6969]  do_filp_open+0x192/0x260
[ 1693.848331][ T6969]  ? may_open_dev+0x100/0x100
[ 1693.852996][ T6969]  ? mark_lock+0xc2/0x1220
[ 1693.857401][ T6969]  ? __kasan_check_read+0x11/0x20
[ 1693.862416][ T6969]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[ 1693.868379][ T6969]  ? __do_execve_file.isra.0+0x7d4/0x2270
[ 1693.874361][ T6969]  do_open_execat+0x137/0x690
[ 1693.879042][ T6969]  ? unregister_binfmt+0x170/0x170
[ 1693.884157][ T6969]  ? lock_downgrade+0x920/0x920
[ 1693.888989][ T6969]  ? lock_downgrade+0x920/0x920
[ 1693.893825][ T6969]  ? do_raw_spin_unlock+0x181/0x270
[ 1693.899010][ T6969]  __do_execve_file.isra.0+0x16d5/0x2270
[ 1693.904635][ T6969]  ? copy_strings_kernel+0x120/0x120
[ 1693.909911][ T6969]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1693.916311][ T6969]  ? getname_flags+0x277/0x5b0
[ 1693.921078][ T6969]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1693.927576][ T6969]  __x64_sys_execve+0x8f/0xc0
[ 1693.932251][ T6969]  do_syscall_64+0xfa/0x790
[ 1693.936752][ T6969]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1693.942817][ T6969] RIP: 0033:0x45c6c9
[ 1693.946714][ T6969] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1693.966312][ T6969] RSP: 002b:00007fc073107c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 1693.974806][ T6969] RAX: ffffffffffffffda RBX: 00007fc0731086d4 RCX: 000000000045c6c9
[ 1693.982948][ T6969] RDX: 00000000200005c0 RSI: 0000000020000340 RDI: 00000000200000c0
[ 1693.990981][ T6969] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1693.998946][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1694.007041][ T6969] R13: 00000000000000a2 R14: 00000000004c31e8 R15: 000000000076bf2c
[ 1694.069033][   T28] audit: type=1804 audit(1581676996.299:1402): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1758/bus/file0" dev="overlay" ino=16560 res=1
10:43:16 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4340e)

10:43:16 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001e00"])

[ 1694.347562][   T28] audit: type=1804 audit(1581676996.579:1403): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2013/bus/file0" dev="overlay" ino=16929 res=1
[ 1694.401060][ T7205] overlayfs: './file0' not a directory
[ 1694.432510][   T28] audit: type=1804 audit(1581676996.659:1404): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2013/bus/bus/file0" dev="overlay" ino=16560 res=1
[ 1694.716876][   T28] audit: type=1804 audit(1581676996.949:1405): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1759/bus/file0" dev="overlay" ino=16647 res=1
10:43:17 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x300, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:17 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0', @ANYPTR=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESHEX], @ANYRESOCT=0x0, @ANYRESHEX]])
chdir(&(0x7f00000002c0)='./bus\x00')
setxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@sha1={0x1, "637c32d26f6b0bb754c9f9cb82eee5c21f442694"}, 0x15, 0x1)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000540)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0], 0x8})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', &(0x7f00000001c0)=""/87, 0x57)
rmdir(&(0x7f0000000400)='./bus\x00')
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:17 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4340f)

10:43:17 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0', @ANYRESDEC])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
syz_mount_image$erofs(&(0x7f0000000100)='erofs\x00', &(0x7f0000000140)='./file1\x00', 0x400, 0x5, &(0x7f0000000600)=[{&(0x7f0000000400)="233ff63a9194b836605c178353aa105fbfe5c9f3171b023f714b3413240c38c08c14a511dce5aaa4c5c106e40619210116e595c1744011c0a229bc5c811719599fbe0d94b8efe0c970e6a07483e865b8bad4e739098eefd5beb98c2de3e8723607ff053b7e3e88aca2d6437a5862ad0a6054ce559eddae7f323813f69b2b16213183c3c7693adcc1a40095746d0475dd63c9c8fb5aa4e91366ed7b7a345f41fb991f17a9019f143984051f36b71b6027f6c2c916ce95bdb7b29bea3aedc5b5582b2935fff6bc3665574b25f0635f842b12", 0xd1, 0xffffffffffffffc1}, {&(0x7f0000000300)="04f1b42ea9cfaefe675d8f80899ab4", 0xf, 0xbf}, {&(0x7f0000000340)="824f76cfd52e9c31f1a77fcaa58ff4f1547e28de397d5833baf6fc8426bb9526210c6315a7dc7551e49e28698325cfecb05a667f5b4477cfb21a8d598621c6", 0x3f, 0x4}, {&(0x7f0000000500)="951bba4451d9ac3af91b0eed196ea51cd5b1ff838c987750bd412640ef8e1ad33ac86860cc584776f5ce54b156536a3166f1ccd46e9813ee823354bcd7a2ffb703bfc28adbbc0573bd7104f2a0f058eec0134eaee064457a40e849cef20e752b65ab06c21e6ef25bd3711b50d31669a1113ddb13acc0f9da0649f358ccff8ab7a33fa184589e382005c3079081641cce3acdd682549b42b9adc94dc71c6563f96ceba55b94caf24696e371565ea579cd1a918da6ba251ad80a53e7cc6c8d416727252bcbf1d5ef124c1015f2a27e5753cd913ed03ed0667c", 0xd8}, {&(0x7f0000000380)="7ed7c223b0baed39adda0efd5162c3a549d644f786b53459569810e5cedeecac84e65f457edf6e4a2ca4252df54c", 0x2e, 0x2}], 0x802444, &(0x7f0000000680)={[{@fault_injection={'fault_injection', 0x3d, 0xfff}}, {@user_xattr='user_xattr'}, {@noacl='noacl'}], [{@dont_measure='dont_measure'}, {@euid_gt={'euid>', r1}}]})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2a)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28])
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)

10:43:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x10000, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x989e, 0x9, 0xc5, 0x5})
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r3, 0x10, 0x0)

[ 1694.938863][   T28] audit: type=1804 audit(1581676997.169:1406): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1923/bus/file0" dev="overlay" ino=16786 res=1
[ 1694.976946][ T7535] overlayfs: failed to resolve './file018446744073709551615': -2
10:43:17 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:17 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
link(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='./bus\x00')
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f77657264697e3d2e2f6275772c77ec726b9cf6612382ff25b0eb0f0087ced7e382a3bd7d3e6b0c566469723d2e2f66696c65312c75707065"])
mknod(&(0x7f0000000340)='./bus\x00', 0x2, 0x1)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0)

10:43:17 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x541a40, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e23, 0xf80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd50}, {0xa, 0x4e21, 0x1, @remote, 0x9}, 0x6, [0x4, 0xec41, 0x0, 0x921d, 0x5, 0x4, 0x8, 0x3]}, 0x5c)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
setxattr$security_evm(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000400)=@v2={0x3, 0x1, 0x7, 0x1, 0xbd, "5abfe25bcd10a2473a37dd73f4eb014da101c3c8e8614468f1fe1f3d9e2eecb5e21281d96ed085ead81de4e4d4cfc4b479abacfb8f8d125333ded3a9f3eb9f90da5a08bbc14c9216906c79a8fa1357ad85e9d113adcc8252b1d3f03c2de5849de8aae4e3df060530a3413631c8324c610875fb96ea4a69de0620e982c9e597528ef6fe9a09727e90609a9efbca58abb3b54f72aa0c7d35bb23911d5c9f1afccf009affdfc6a85c51aa07e94836406f6d4bc525cc621b1b05eadfc36827"}, 0xc6, 0x2)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x8001)
open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43410)

[ 1695.280145][ T7538] overlayfs: './file0' not a directory
10:43:17 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1695.385682][ T7758] overlayfs: failed to resolve './bus': -2
10:43:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x7ff, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r4, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}, @ib={0x1b, 0x6, 0x1624e, {"6e796a873725f288e2a9a472d1e16720"}, 0x81, 0x2, 0x3}}}, 0x118)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r5, 0x10, 0x0)

[ 1695.431008][ T7765] overlayfs: unrecognized mount option "lowerdi~=./buw" or missing value
[ 1695.492524][ T7763] overlayfs: './file1' not a directory
10:43:18 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x500, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:18 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="030f000000000000000100000000000000000000000000002942fbc58521cf90"])

10:43:18 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:18 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x2808, &(0x7f0000000140)=ANY=[@ANYBLOB='lowerdir=./bus,work`ir=./file1pperdir=./file0\x00\x00'])
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x40]}, 0x8)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000f40)={0x8, {"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", 0x1000}}, 0x1006)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000002380)=""/4098, 0x1002}], 0x1}}], 0x1, 0x0, 0x0)
splice(r5, 0x0, r0, 0x0, 0x10000, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43411)

10:43:18 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x500000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:18 executing program 3:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:18 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43412)

10:43:18 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x600000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1696.415027][ T8215] overlayfs: failed to resolve './file1': -2
10:43:18 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./nile1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)

10:43:18 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x84)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x14002, 0x0)
setsockopt$rose(r1, 0x104, 0x0, &(0x7f0000000140)=0x8, 0x4)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:18 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1696.704310][ T8427] overlayfs: failed to resolve './nile1': -2
[ 1696.753623][ T8427] overlayfs: './file0' not a directory
10:43:19 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x600, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43413)

10:43:19 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @union={0xb, 0x2, 0x0, 0x5, 0x1, 0x8000, [{0xd, 0x4, 0x3f}, {0x0, 0x4, 0x10001}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0x0, 0x2}]}, @restrict={0xfffffffe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000300)=""/154, 0x80, 0x9a, 0x1}, 0x20)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x501800, 0x0)
getpeername$netlink(r0, &(0x7f0000000140), &(0x7f0000000400)=0xc)
r2 = add_key$keyring(&(0x7f00000014c0)='keyring\x00', &(0x7f0000001500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="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", 0x1000, r2)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:19 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0x10, 0x0)
syz_mount_image$afs(&(0x7f00000000c0)='afs\x00', &(0x7f0000000140)='./bus\x00', 0x2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000300)="f2a82d2013f09d92bc72b211c71d8cbdb20089735e3d20910bf60c49afa2801c90e856b82c6ba4186ce773d2fcf457f470fbbffa3dfa8cf0ce8e2986599469ffc9d5d1710c030325903ddbcb95865806a15737bfed14ab91803932302fa52b843347ca21df357dd154c478a7906b46c21be1ac83e705c28886439bad457f06922407b5af5fa83d88d540e20df9db618ffa4b3bebf6f4ee6de854d6a32ccbd43abb3c29cb0bd65d4e64b9942b44ad8a06b5bfa2b674d9c634b3d26c26e4d42ae2762cc9dc4dbfa78de3cb94edf47e99640bf800761693edd77c4e614749f200baa2410c", 0xe3, 0x10000}], 0x1005020, &(0x7f0000000400)={[{@flock_local='flock=local'}, {@flock_openafs='flock=openafs'}, {@dyn='dyn'}, {@flock_strict='flock=strict'}, {@dyn='dyn'}, {@autocell='autocell'}, {@autocell='autocell'}], [{@hash='hash'}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}]})

10:43:19 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000300)={0x4, {{0xa, 0x4e22, 0x2, @empty, 0x2}}}, 0x88)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x9, [0x7, 0xc6, 0xcf, 0x8, 0x8, 0x7fff, 0x1, 0x8, 0x3]}, &(0x7f0000000140)=0x16)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:19 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x900000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1697.265819][   T28] kauditd_printk_skb: 10 callbacks suppressed
[ 1697.265835][   T28] audit: type=1804 audit(1581676999.489:1417): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2017/bus/file0" dev="overlay" ino=16881 res=1
10:43:19 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000003c0)={0x3})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={<r4=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x6, 0x2, 0x8, 0x5, 0x3ff, 0x5, 0xa5, r4}, &(0x7f0000000300)=0x20)

10:43:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file1\x00', 0x8, 0x1)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=le1,upperdir=./file0\x00\x00\x00\x00'])
chdir(&(0x7f00000002c0)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000300)={0x20, 0x6})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0x10, 0x0)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800)

10:43:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43414)

[ 1697.468511][   T28] audit: type=1804 audit(1581676999.489:1418): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1763/bus/file0" dev="overlay" ino=16866 res=1
[ 1697.545512][   T28] audit: type=1804 audit(1581676999.599:1419): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2017/bus/bus/file0" dev="overlay" ino=16596 res=1
[ 1697.588718][   T28] audit: type=1804 audit(1581676999.609:1420): pid=8670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2017/bus/bus/file0" dev="overlay" ino=16596 res=1
[ 1697.628447][   T28] audit: type=1804 audit(1581676999.679:1421): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir813537187/syzkaller.SEhxKF/1763/bus/file0" dev="overlay" ino=16866 res=1
10:43:19 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1697.783349][   T28] audit: type=1804 audit(1581677000.009:1422): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1929/bus/file0" dev="overlay" ino=16560 res=1
10:43:20 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43415)

[ 1697.887570][ T8862] overlayfs: failed to resolve 'le1': -2
[ 1697.974134][   T28] audit: type=1804 audit(1581677000.139:1423): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2018/bus/file0" dev="sda1" ino=16867 res=1
10:43:20 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x700, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:20 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
umount2(&(0x7f0000000140)='./file1\x00', 0x1)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:20 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:20 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1698.146089][   T28] audit: type=1804 audit(1581677000.179:1424): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2018/bus/bus/file0" dev="sda1" ino=16532 res=1
[ 1698.242334][   T28] audit: type=1804 audit(1581677000.179:1425): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2018/bus/bus/file0" dev="sda1" ino=16532 res=1
10:43:20 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000300)={0x4, {{0xa, 0x4e22, 0x2, @empty, 0x2}}}, 0x88)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x9, [0x7, 0xc6, 0xcf, 0x8, 0x8, 0x7fff, 0x1, 0x8, 0x3]}, &(0x7f0000000140)=0x16)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

[ 1698.290222][   T28] audit: type=1804 audit(1581677000.499:1426): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir562564366/syzkaller.xjmWTA/1930/file0/file0" dev="sda1" ino=16707 res=1
10:43:20 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:20 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:20 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43416)

10:43:20 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1f00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:21 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x48000, 0x0)
accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80)

10:43:21 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000300)={0x4, {{0xa, 0x4e22, 0x2, @empty, 0x2}}}, 0x88)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x9, [0x7, 0xc6, 0xcf, 0x8, 0x8, 0x7fff, 0x1, 0x8, 0x3]}, &(0x7f0000000140)=0x16)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:21 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43417)

10:43:21 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0xe80, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:21 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:21 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x100001, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file2\x00'}, 0x10)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:21 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2010000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:21 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43418)

10:43:21 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000300)={0x4, {{0xa, 0x4e22, 0x2, @empty, 0x2}}}, 0x88)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x9, [0x7, 0xc6, 0xcf, 0x8, 0x8, 0x7fff, 0x1, 0x8, 0x3]}, &(0x7f0000000140)=0x16)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:22 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43419)

10:43:22 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4800000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:22 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x1100, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4341a)

10:43:22 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4c00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000300)={0x4, {{0xa, 0x4e22, 0x2, @empty, 0x2}}}, 0x88)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:22 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4341b)

10:43:23 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r6, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r6, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r6, 0x0, r4, 0x0, 0x10000, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:23 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6800000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4341c)

10:43:23 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6c00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:23 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3000000})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[<r3=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000001c0)={r3, 0xffffffff, 0x6, 0x2, 0x3, 0x3f, 0xeb, 0x0, 0xfffffffa, 0x8})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]})

10:43:23 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x4000, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:23 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:23 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7400000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4341d)

10:43:23 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x24)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x400, 0x7, 0x1ff, 0x8]}, &(0x7f0000000140)=0xc)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x402c2, 0x114)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:23 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:23 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7a00000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x4341e)

10:43:24 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff00000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:24 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:24 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000400)=""/246, 0xf6)
splice(r4, 0x0, r2, 0x0, 0x10000, 0x0)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000140))
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000000c0)={0x1})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r7, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r7, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r7, 0x0, r5, 0x0, 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000001c0)={0x0, 0x0, 0x2002, 0x1})
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43421)

10:43:24 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f84ece", 0x6000, 0x29, 0x0, @dev, @empty, [], "aa40ca86ff8668ac"}}}}}}, 0x6a)

10:43:24 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x97ffffff00000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1702.379466][   T28] kauditd_printk_skb: 11 callbacks suppressed
[ 1702.379485][   T28] audit: type=1804 audit(1581677004.609:1438): pid=11163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2027/bus/file0" dev="overlay" ino=16524 res=1
10:43:24 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10)
ioctl$int_out(r1, 0x5462, &(0x7f00000000c0))
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:24 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r4, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:24 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xbc10000000000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

10:43:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43422)

10:43:25 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c653a75caa289b9d9b89f312c75707065726469"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3})

10:43:25 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff00000000, &(0x7f0000000440)={[{@size={'size', 0x2c}}]})

[ 1702.852934][   T28] audit: type=1804 audit(1581677005.079:1439): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir518097233/syzkaller.WbTbZk/2028/bus/file0" dev="overlay" ino=16771 res=1
10:43:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0)
splice(r3, 0x0, r1, 0x0, 0x10000, 0x0)
pipe(&(0x7f0000000280))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]})

10:43:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r2, &(0x7f0000000200), 0x43423)