0x2, 0xfff}, @mss={0x2, 0x8}, @mss={0x2, 0x101}, @mss={0x2, 0x8}, @timestamp, @timestamp, @mss={0x2, 0x7fff}, @window={0x3, 0x8, 0xfc57}], 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000038, 0x0) 12:33:27 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x197) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xb0c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0xea3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, {0xa, 0x4e23, 0x10001, @loopback, 0x1}, 0x1a69, [0x6, 0x2, 0x6, 0x3, 0x1, 0x0, 0xd26, 0xd15]}, 0x5c) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) syz_open_procfs(0x0, &(0x7f00000015c0)='net/vlan/config\x00') close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0xffffffc1}]}, 0x14, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001700)=""/4105, 0x1030}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)=@buf={0x1000, &(0x7f0000000580)="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"}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 265.607449] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 265.638487] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 12:33:27 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000000)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00200008060104000039e300000006000000000000000000000000fcedb40957da71e76003f44a5008d16a641e6e146a8e9bde3561e66f8ce3d745d4d79fe8f7"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) [ 265.943658] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:28 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:28 executing program 2: prlimit64(0x0, 0x9, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x400, 0x1, 0xffffffff, {0x5, 0x1000}, 0x8f4, 0x7}) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6}) [ 266.219522] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:28 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) fallocate(r3, 0x26, 0x0, 0x10000101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000003500)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x3ff], 0x1, 0x40800, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f00000000c0), 0x0, 0x0, r5, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x4) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:33:28 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:28 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:28 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$tipc(r6, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c110000000000090000070081ffffff00000000000000385a58000000000000000000000000000001000000e6ff00000000ea0000000060000000000009a1e5aa21b058364086d61ab223c6c5d51c73a79a41736248630a739f1bffdc0831baba3c020000004fda59ec8ffd73202fba7ba2c294483b5b88e2d04e8628b5c4d8836e0ddd368f0e7f750000a29d4d027f1cfc8edce2a899a4498f0600eed814e9167f63bf7a2f24e2bfdb2b3792fdeae2de2048f50000040000000000006254da3932c1e639c1c35648385da4696823023246aefb26bb960739b70e56882fb305187484b4b59833ed5572ec1846800997402c6d50fd859486bfedefc653e4cc7690118cb0d71e74e16513a74a27c7e1ba8ad656e8b5ea9e648119e5656eb1cd8aa937429780f560c454e1"], 0x14b) 12:33:28 executing program 2: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0x10000, 0x3000, 0x81, 0xed, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x0) 12:33:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="040454e4c453047e788b9f37bffd6af8f1d25f37d4ff13e4a21b663e18645805a4156e547aa694e6e8cdca03edcd8848d95a548d95f2c642ea8d057f9c13662b4cc33c2938794ae9d8555dc8a64da5889a13ae5763b2c49d428c212883de421d2fd30f054fb561c43e895188a0c80f606f841c4874"], 0x16, 0x1) 12:33:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000240)={0x1, 0x6}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14012, 0x758}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x7) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000180)={0x8, 0x1000000f, 0x9, "41f9c577339e7cd6deea889e667ba0b1a92239e03614516d3259c940f7ddbe6e2b5aaa67cd6bc7586a141fe52a816636b45aa2307222b377526ff4e0", 0x1f, "c48042ed2d0c3bb9804a4b168e3136e73aea32260523d032288960f4a791ed9a5879bf7c96fa93f9d42f75cc81000000b300", 0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="18000000560007031dfffd946f6105000700000400000000", 0x18}], 0x1}, 0x0) [ 266.811643] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 266.827522] SELinux: failed to load policy [ 266.841366] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 266.863945] SELinux: failed to load policy 12:33:29 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7ce}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/current\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) set_thread_area(&(0x7f00000001c0)={0x401, 0x0, 0x400, 0x0, 0x3, 0x1, 0x0, 0x1}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000021}, 0x20008050) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x1, 0xfffff001, "ee30a94c90c719c0e32e13cc8bac8e657ef97c7e4e2e4037330d44da5f784600d364cc46a07e5d0d82b4d0eb18a9a9ecf7402e748b0c69ba7a50338940a08f24a0688345225d82beb5440c87a8aaa776ab19063ede3a8297c53753f9cb5d7210f7c1d38ed9ab83c795c3f109d0ee45ff96b963ac853c435498ec4621d3ad426828a7bb5eb30f1e6bc828e6c1e83db0dd32077e79012e602b573ba5ca1fc60513cce82139eafcda588c391432a4c099d5d6a6fd8db65aaae5b071b69aed0295ba62b747f91ab66d148ebd95602282f1152abd5ccc0bd324ee441346cdbb509cd9a2c692e17e14586af488e88ca86ce130fb6a115b45db466d026179a773067a98", 0x3f, 0x20, 0xc7, 0x95, 0xb, 0x1, 0x3}, r4}}, 0x120) fchdir(r2) syz_read_part_table(0x7, 0x0, 0x0) 12:33:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 12:33:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./bus\x00', r1, r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) [ 267.052004] audit: type=1400 audit(1584621209.137:80): avc: denied { sys_admin } for pid=9353 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:33:29 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 267.147469] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 267.163382] IPVS: ftp: loaded support on port[0] = 21 [ 267.390243] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:29 executing program 4: r0 = getpgrp(0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[d::],08::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000000000014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000001c0)={{0x0, 0x1, 0x1, 0x0, 0xff}, 0x1f, 0xcf}) 12:33:29 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000340)=""/4096) r4 = socket(0x11, 0x800000003, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x9, 0x3a, 0x2, 0x0, 0x9, 0x4}, 0x9c) getsockname$packet(r4, 0x0, &(0x7f0000000300)) 12:33:29 executing program 1: inotify_init1(0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$evdev(r0, &(0x7f00000001c0)=[{{0x77359400}}, {{0x77359400}}], 0x30) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x802, 0x0) pipe(&(0x7f0000000040)) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x40) ftruncate(r1, 0x208200) accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @netrom, @rose, @remote, @remote, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) io_setup(0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) pipe(&(0x7f0000000340)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x94cf41d1a3c6edfd, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0x47c) sync_file_range(0xffffffffffffffff, 0x0, 0x20000000000000, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xb72}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 12:33:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000300)={0x400, 0x1, 'client1\x00', 0xffffffff80000000, "3539ee0e78f4d473", "89028b2610f8f7a470a40448134f374f38e6b8e09c09f73b5fb7411fb4320843", 0x1, 0x4}) r4 = socket$netlink(0x10, 0x3, 0xe) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0xb0, 0x24, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1a, 0x2}, {0x6, 0x10}, {0x1, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8, 0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @qdisc_kind_options=@q_blackhole={0xe, 0x1, 'blackhole\x00'}, @qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x44, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3d}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x100000}, @TCA_CODEL_TARGET={0x8, 0x1, 0x3f}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8}]}}]}, 0xb0}}, 0x0) 12:33:29 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0xc00c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0x14, 0x1d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r3, 0x2}) [ 267.786433] libceph: connect [d::]:6789 error -101 [ 267.796706] libceph: mon0 [d::]:6789 connect error [ 267.809123] ceph: No mds server is up or the cluster is laggy 12:33:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) io_setup(0xdd, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8}, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=0x10001}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000005300000095000000000000445a0708d1303274df96965142c50000000000009a791dba3e4233542f67a07e7255df2fa25dc49432457ddde8ec5afff74287d7b8e902ab041da7cbfb0fccd47303"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x8, 0x3}, 0x10, r1}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20050}, 0x4000000) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) 12:33:30 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 267.909289] libceph: connect [8::6]:6789 error -101 [ 267.915194] libceph: mon1 [8::6]:6789 connect error 12:33:30 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2180, 0x0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000280)=""/4096) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) r2 = gettid() tkill(r2, 0x1000000000016) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/mnt\x00') sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 12:33:30 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0xc00c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0x14, 0x1d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r3, 0x2}) [ 268.126267] audit: type=1400 audit(1584621210.207:81): avc: denied { map } for pid=9413 comm="syz-executor.2" path="/root/syzkaller-testdir948571533/syzkaller.J6aGmF/30/file0/memory.events" dev="loop2" ino=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file permissive=1 [ 268.296524] overlayfs: failed to resolve './file1': -2 [ 268.535655] ceph: No mds server is up or the cluster is laggy [ 268.570697] libceph: connect [8::6]:6789 error -101 [ 268.576023] libceph: mon1 [8::6]:6789 connect error 12:33:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x101040, 0x0) sendto$ax25(r0, &(0x7f0000000080)="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", 0x1000, 0x4000, &(0x7f0000001080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @bcast, @null, @null]}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001100)={0x2d42, 0x7f}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb9, &(0x7f0000000080)) 12:33:30 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:30 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23}, 0x10) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffd8) 12:33:30 executing program 1: r0 = socket(0x21, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="cf", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) [ 268.597566] ceph: No mds server is up or the cluster is laggy 12:33:30 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 268.725200] overlayfs: failed to resolve './file1': -2 12:33:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x101040, 0x0) sendto$ax25(r0, &(0x7f0000000080)="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", 0x1000, 0x4000, &(0x7f0000001080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @bcast, @null, @null]}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001100)={0x2d42, 0x7f}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb9, &(0x7f0000000080)) 12:33:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000300)=""/151, 0x97}], 0x2}, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x600800, 0x0) lseek(r5, 0x80, 0x3) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x60, 0x110, 0x1, "83705fd159b604044d0170f4bb95ef2acd525f670a8ea0e9f02653f8cd50f9c37fe935a9b3c6011f21535950e2c78142a3fec5539fbb2953fb4f74561d6279a71122e315a756e88bd20053f2"}], 0x60}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 12:33:31 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 268.929732] overlayfs: failed to resolve './file1': -2 12:33:31 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}], [], 0x6b}}) chdir(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x13, 0x20, 0x83, &(0x7f0000000980)="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"}) [ 269.108044] overlayfs: failed to resolve './file1': -2 12:33:33 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2180, 0x0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000280)=""/4096) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) r2 = gettid() tkill(r2, 0x1000000000016) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/mnt\x00') sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 12:33:33 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/153, 0x99}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x10, &(0x7f00000006c0)={r5}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r5, 0x4}, &(0x7f00000000c0)=0x8) preadv(r0, &(0x7f00000017c0), 0x35, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r7, 0x4602, &(0x7f0000000000)) 12:33:33 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280), 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$TIOCSIG(r2, 0x40045436, 0x32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') ioctl$TCSBRKP(0xffffffffffffffff, 0x7040, 0x0) pipe(0x0) r3 = gettid() tkill(r3, 0x1000000000016) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95bfdb700030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 12:33:33 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:33 executing program 4: mprotect(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x0, 0x70bd26, 0x25dfdbfe, "", ["", ""]}, 0x10}}, 0x0) 12:33:33 executing program 2: inotify_init1(0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$evdev(r0, &(0x7f00000001c0)=[{{0x77359400}}, {{0x77359400}}], 0x30) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) r1 = creat(0x0, 0x40) ftruncate(r1, 0x0) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) io_setup(0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x444501, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0xfffffffc) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0x47c) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xb72}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5804}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 271.229469] overlayfs: failed to resolve './file1': -2 12:33:33 executing program 2: chdir(0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x44) mkdir(&(0x7f0000000140)='./bus\x00', 0x48) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x94e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x3f7, 0x8, 0x70bd29, 0x25dfdbfd, {0x5, 0x5, './bus', './bus'}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0xcd0be79e47e5186e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000380)={r7, &(0x7f0000000300)=""/112}) 12:33:33 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffc3f, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x480d4}, 0x40081) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000010001fff00000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="08000000000000003c0012800900010069706970000000002c0002800800020000000009060011004e24000008000100", @ANYRES32=0x0, @ANYBLOB="0600100000040000040013000400130008000a00", @ANYRES32=0x0, @ANYBLOB="606f39f02c4a809601f8f5f9bf36096cd5ce2f4584c924afd3e63e7a5fda4ee6d01d09650fd4faf452d1904acd79b161d8932c90cd19660705eb863dbd8f59a2a3658fb23ee862914e34e77cb826579189babe08073d8a785611c23c02ad29aeb7bd9effc60074cbcbe7c12bf7c63a5b2dfa5223d80eb0f523ea7d599d20609c01cf77baef802adda0b4f66376f50a331d4cbe47b947d06d2ba46996cf181646f56161abe632cfd70695e9327bb3ab8fa054ff45da8aed4c5fe6d1dc08cfbcab77a9031386"], 0x64}}, 0x24000000) 12:33:33 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fscache']) [ 271.375233] overlayfs: failed to resolve './file1': -2 [ 271.393119] overlayfs: failed to resolve './file1': -2 12:33:33 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 271.454223] XFS (loop4): Invalid superblock magic number [ 271.469282] overlayfs: failed to resolve './file1': -2 12:33:33 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5af2c690f2c47c31428dcb00b75972ce5c0462f046a498ec918aea3bc0b0fc7aba56e2c15ad6ccb27193f817e4080418be94049491d17c0b094c77421ba2f6f2a4265e5e310099683709b0a5810a4288551ef324ac9afffabacd0a56b1df63e07930f76b7564796ef02b02d3cd7d"], 0x3c}}, 0x0) 12:33:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) select(0x40, &(0x7f0000000080)={0xd7c, 0xf, 0x8, 0x0, 0x5, 0x0, 0x40, 0x3}, &(0x7f0000000100)={0x3, 0x6, 0x4, 0x5, 0x7ff, 0x391, 0x200, 0x8}, &(0x7f0000000140)={0x7, 0x8, 0x1, 0x100000000, 0x5, 0xf88c, 0x7a, 0x50}, &(0x7f0000000180)={0x77359400}) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f5, 0x400, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x8855) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=0x0]]) 12:33:36 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:36 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2c00, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x2}]}]}, 0x28}, 0x1, 0xfffff000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100040000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) statx(r3, &(0x7f0000000140)='./file0\x00', 0x2000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x40010, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions='default_permissions'}], [{@appraise='appraise'}, {@measure='measure'}]}}) 12:33:36 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x8ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000001d8614e971d65cebf2e6532ea86ea1fcee19b7034c461287b74c83ee9d4e9a582669cc0f6f9105f9c2535f1a3c4d340e05224d9240898033573fc438173ff56b49a7ae7951c9a65f64fa982ddd70a64e9e40ef11d5ae1637e8bc11cb0a5511d003f5d710af9e0b86ec1e54970c2c0fd83d05760fe1339012be9f744385b3d372171092fdd3c61d4d369eac523d087647", @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365f25f69643d", @ANYRESDEC=0x0, @ANYBLOB="b989c44bdc2c67000000", @ANYRESDEC=0x0, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r6, @ANYRESDEC=r2, @ANYRES16=r7], @ANYRES32=r8, @ANYRESHEX, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR64, @ANYRESOCT=r2, @ANYRES64=r1], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYPTR64, @ANYRESDEC, @ANYPTR, @ANYRES32=0x0, @ANYRES32=r10, @ANYRESHEX], @ANYRES32=r2]]) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 12:33:36 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xe2, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffd8) 12:33:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0x80045002, &(0x7f0000000000)) 12:33:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007b113000000000008510000002000000850000002a00000095001c000000000000f6ffffff000000b7880ea88c42f2082f2fcc26f96263ee0ab4820516fc1e2b5b5ee163d222ce5e15776da00023853f5ffb96fab1427d831cca13a789d9e743821256d95d888101f22a5f1f7c4fcedcc41c2ad744bbf4b0e099fcbdd4ad7ec076548f6e16c3660804e08fe4186223fe01c178c870e1202079287e5fdaac2b7efb5796bc4990b9e00d683172e16c987b4284d10a634eb938e931e72a63ada425203a366b27431b8d56852149b6ad2f4b6a9056960e0b58ed8e000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 274.363876] bridge0: port 1(bridge_slave_0) entered learning state [ 274.386824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 12:33:36 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, 0x0}, 0x4050000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 12:33:36 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 274.419315] audit: type=1400 audit(1584621216.497:82): avc: denied { prog_load } for pid=9556 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 274.424015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 [ 274.513622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 12:33:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x84a0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4, @perf_bp={&(0x7f0000000180)}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x41, r4}) close(r0) open(&(0x7f0000002000)='./bus\x00', 0xa006c0, 0x144) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x103500) close(r5) io_setup(0x6, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x51}]}, 0x18}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000001c0)={0x6, 0x101, 0x7ff, 0x7}, 0x10) 12:33:36 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2ceb3504df6ead74ed8a60ab563e98b592a3d27a7082dbb78ab0200c8563fba3da8b7f56445ab100621d6234555c00004fd1b37860ecd89e9b08e3f5972fe9ca1e86323e19268c89ca5d81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000000083e37f932a6b342390e27b6276676b659bdba8afe51cf610691e711b8e34b1cd3e381a3acaecbbbe3aef8276ad68f0ba06d89dbb3b8ed6000000000000b27d2e58cf2dbe4d05a51f7b2ad48d0d94e9c1cb29bd7672157fe7dc16b746312c9bfc8d0765c635ae5396e28612b2e71d7146dd392a8bc474"], 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000200)={0x101, "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"}) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000340)=0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) stat(&(0x7f0000000080)='./file0/file0\x00', 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x800, 0x2, 0x1c, {0xa, 0x4e22, 0x80000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffff}}, 0x24) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 274.555789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 [ 274.622839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 [ 274.653716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 12:33:36 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}], [], 0x6b}}) chdir(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 12:33:36 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 274.700627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 12:33:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000040)={0xa20000, 0x8, 0xffffff76, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a7c, 0x3, [], @value64=0x40ad}}) connect$rose(r2, 0x0, 0x0) socket(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x18, 0x0, 0x0) [ 274.742366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 [ 274.815960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 [ 274.862487] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 274.884379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9554 comm=syz-executor.4 12:33:37 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000480)='./file0\x00', 0x191) r2 = fanotify_init(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000280)={0x0, "c40664b671fed14c101b4595c2e6f387ff4ecb65e4ec95ac120573fadbd49cad", 0x3, 0x7, 0x3}) fanotify_mark(r2, 0x2000000000000011, 0x2, r1, 0x0) fanotify_init(0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x200, "f4908f32e90d2243735d3a190a84638ea1f5e6caecc416e8368e6b4b8bb6368e", 0x2}) open(&(0x7f0000000200)='./file0\x00', 0x478042, 0x100) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x5, 0x4}, 0xc) write$P9_RREADLINK(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x37) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 12:33:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffd89338706972690eb446cfc0ffffff000000000900010068667363"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x26, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0xe, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000080)="af81c399ae261b69b8b948d51dffb7240491c2b942ba904895ad39f223fb01f5cbb4f79a3902ff2044c9c183992916c99f988811a8505181c20d0152198ae9d1964d13aea366ac52e2b56db1f46238f4", 0x50}, {&(0x7f0000000480)="b1e60b3d091f4538a0456fcdc6a4c4756f0b32280ad4c86223e2a6c2a3b4d2e259e420b7508133b16f4855bbe54074529071be640054e7346b0e36904ee510ca765440fc8f3a1ce2105e1cac0f2353a591c2e5fc4c03eec4c0ff72bfa4fedcedb4ebef426ec2c6c7a0d11fad7d1ebbc9a83c90ea6d5aa4098d7334b9", 0x7c}, {&(0x7f0000000500)="b7e89b9c8bf8a8470467fc17b206033e8ecc2040f9d8efad79683295783bb781723869d017f0e536a0119f64a73054fb9b64292111ae6b2221d9647edf37e3ff1e98e1c3900ce88064c4bcb943984c0f426d132bda3cd631c9c9c64811bafb961696cab81bd882bbeba5113d6760d1a67e200ea8ff685f11c69db5484c664f4336b966b9e5d09f668b", 0x89}, {&(0x7f00000005c0)="878bd0f7e4d885a9b202ae5609b69732bb35cbcff7f49e709077d5f684b54c7b5ef431067f5da04db8774a9577b67e3f3e65b3766b7d5536f8c6f01841400a262c6d72086fc997c4c342c6b264ead83bfbcc21d1e666972ea6366524c2ea0871b9ac198db7", 0x65}, {&(0x7f0000000640)="b029d145b664cb24d61a3347a60e81d0c95bd7cc0e1742b904796e5ad58b47dbedecb99c2211c93a13fded31fe830e67a1ae21c1c134c0cb1474c7663ed8ef12ae9566bffa678f25198608fc7109376074e225254a212304f306ddb6bee275dc5329efac9a22852bebba37a046ea17b34eca098e984548d77e2b89652fbdf91fef3df513a83c5a1131f59ab6e84c3d85329b6703a430047498fce812dce4e081239d8ae83ba9", 0xa6}, {&(0x7f0000000740)="8b1c93b1269315f247afe7492db2982786e9c26a30f79d90d44196791ddf6245fe8cba1727adf1ce7b854ce791416711d4b3c7240fe30188da7c5ec936a2431b11b1efba55d5d4cee288fe52a95aa501a0909640f199c0387bfec847a591cb156e7efce79ca3cdf7315d83b5ffb98609178e85d818cce5d01e420b381c4dd208ea8a39d12acc446b2709", 0x8a}, {&(0x7f0000000800)="2d7549375192c2c0690ab4a49ce582c1a780701351b51a2ac73281705b2e5fcb863da33841d2a4ae9a22cecf872fb2be56dcbaad8f949f597e01d4fc71f31497393732eff8c56c662b118c3d7883f7cadac11236adfc9d988e110fd473962548a1024185f0351b126d4e339ebe88dd09aee4ab7cfc07abbea7718e0b1eefadf8", 0x80}, {&(0x7f0000000880)="d69b5f00c4516d51c87979b11075c353231dff5934e9127513902c3c8b5b46c316a40bdb25d0ad592e8d4bea9cd98ecd6017e9808bc9c8d2284008da049b2acfec0995c83fff87d77d3991b5eadc15dbcd70888adf6229380e71827e9420efbf4775fd5a87e95c4542c6d43a333ff7ebbc8dfa032d4ec5acc036844b424279407af2f90369ef8f8631da", 0x8a}], 0x8, &(0x7f00000009c0)=[@iv={0x58, 0x117, 0x2, 0x42, "6a0837f959ee0f4119c95fd08a33612c8aa0093830d1785c53b612922af05c57d67fe7e1267e637da69b9546f4775a5629076520e7346bed8e989305ddd14c351f20"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xc563}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x893d1aa72452c561}], 0xb8, 0x24000082}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="b81132234e79c276e14a1878a0385b5612bef9e7f3efdc884cbd5354d8506b273869979c8c3c5dcc8d5718aa0248c132317bee11728ab573f4ce610cec665c117cb155f626b5eb7fbbbc5b54f1cf876583be6882039bc48fdab9817cf3fe79a5eba05df765ee4b018d250878b8d8ca8eae667b9a50cc9f84b209e72ed79f291fffbbee865e8bf26aac4ed83dbd720e302d16e02bbdc9d30149299219278b3fe21104615648d0ab8687a5dcfdc8a9b9d66b114cb1fa73e55c", 0xb8}, {&(0x7f0000000b40)="0b4e81c0b1d3b194c77f44e063d98fec2ba093f62a451432531b8386b2e3b7b18582715c9281fb5f380603878fb6179cbf2cac03a4f33983f210f3ca1c2610d87541b1b98975c600ddc84e791dd31367226ff80c71cc4f4b6a563d7187e348752904deb0df4edc99bafa299cd926e54b6564adc4014d800a9add122c93e89fc467dea0064a103b2ad2bcee86bd1fb376d29af8844bbe75141481fc504b807f0dc9a6ba49001693342bd626b8c4e9", 0xae}, {&(0x7f0000000c00)="f2068ea5e276fba4ba7b9356dcb2f5b6d2e66516794b3f0968b1e388053dd2b00100e031f9035718554a958732eb4e60153aaca0e617f2f5068a395b8c288bbc5136fcc260a52551158f45a9e10e8e39430b708e109f50439db701df60854f73b80fb844fd16f40e08fa36da66427e7cb1d16d63b0cbd05c96858cbeac3ca6c1c79c3bbc630c2fc16590a390c8e7e8141c7f6215", 0x94}, {&(0x7f0000000340)="e049e772b1fd4d8e3cf3e74c4ecf6a3e5a34f256df3eba48d310fd909f76aa2197a0765d68d05e1642", 0x29}], 0x4, &(0x7f0000000d00)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x85}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d40)="38640ff41049cbbc452240a6404e726d18b03d5df099628d4473329598f8ae0102115bbf0f7b271ab3af05823d647be55e2ec70f791288e0184820aef55df8ff93199792675cb2931e24d857664abf165e115de34ffa7dce41c950438d4040309ca02f5f4e9af691cb1a14140ea57fbacbdbe762bd9c8a3f6191d2cfea8746110d9a1ff48b3aa10f3c3bb4e847b42613e12eb700ec9d529a", 0x98}, {&(0x7f0000000e00)="293f803cefc0029a7a91f68e266987d6e73f56ce4c067e4cc1c463779111172a36a4e5b1bed556ce2682ce24532e43cab1ac58dcbeb39920ff6431be9f15552f6e2be5e8660627d5b4a9fe3c1b2629412082e498b346445fe6f63e798c77647c9f4b74bc340f7e346b83f4feb8ed44bb9eaab1545751c1dad6f4ee121a3663f5540e63be6a7a897c8da85befa0ffcc577a0ac1fc8cb2e15f3859c97550b78cd6eacda2c828a9607b471914f09a0cab30c0725c3c9906dd29d2bc3a19a11adb438ccd39e4b79baacfd2f7637c7a1f8c49d05156e6fa7a9db6c39379701d49900424b6a3", 0xe3}, {&(0x7f0000000f00)="70bd5e5e615706d2b86d85c4a0592d7624136a3495a252f3c440f1bbf7b527f31327bb5704f39c2f8297ce77a095779c60e8b26d86fd1960c413fe73fba80449c9def1e6167807d7bb", 0x49}], 0x3, 0x0, 0x0, 0x44801}, {0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=[@iv={0xd0, 0x117, 0x2, 0xb9, "d5efbc72eda897bad46ad8a1850694c2a8e5d57ec644ab34ee02a76c15b8a40930082c63885f903c9724b55295633ee52b9e42082ce6a43ba4a09144144e23057016a1af9de173bbfa1a0027ae40fb65fe689cb5914dabae6a9d7865abe3b94a16403a8a7a55aea26adb5f7d36df37182f9b7c6cd219f575fd15d23a1c88f75fc35a8184da3fa7fc67d807c06b5af1c0ed5122e2c80058e80bd55cc53eba9423cd4f1241883288f6b410803771e6416f4ef36663e3bc9fed47"}], 0xd0, 0x20004005}, {0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001100)="d4d3346680c6240fb7d13117ccbf364c6417c93375d822a4f2b673e0312b9c8e7155da98aa8ae3c00bee35564e59f2a719d6a81609f6eb042733f21a2df883d4460d341eb919fcf2299757bc6fe46997132cfd4a7ecc14d49591b2b33bc46ccf8d49b5215b3ed149391e6692664b3721b9b76d29f550ee6109a457d5c5a0f676d3ed385ba084cd95854879e3d0ceaa25eb5c228e3f881f9a2900f1f3c9836fa3247030ae93e085fe378abd219e46e2723497245cea", 0xb5}, {&(0x7f00000011c0)="26714736d7ebc6292fa22ec3b8af90e798a92186e466af1c5afaf18c45", 0x1d}], 0x2, &(0x7f0000001240)=[@iv={0x20, 0x117, 0x2, 0xa, "ca6a0eb68eb40b4bb0a3"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xf178}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xd0, 0x117, 0x2, 0xb5, "e088439cbb58e9e02031a9bd0822eedb324ef2c1af50187bf5b24bcecd8f52afbd82615a37998fc53c7800e49e8f8afee578289206304f831a39655a6ab98e874a6bc96c56fab2e3b94f260641e84f88c7e33db6b587919d87a034b7a42251f0952c8dc15e7d40107d9ada7b912cab82489521701a9503ae71f64ecaf9d3c3fe8d940c7bcd45510e72f51a506cfc9469b08cc328181272752c401de4bc7154b0b9ae040764bd4f63455eeff49b359927482ea038db"}, @iv={0x100, 0x117, 0x2, 0xe5, "8e7421e2d6f0db46b11ac2c39ef3660dc26215e7c71c00144c34134465684c715b54a43c860b15f017c0f85929fa5d794f74f6a742d0b99948fe228beb2eb43591f3c50cb6ad8e788379b1e997ec86f2b59553ba9dabfcfcac404b9e1e3f3329881d9882c4c98d49ccf23c43e3921918d4debd202b92ce0d44e14fb16d7821c14d322d1064d500703f55c71bf969140b2308807211e58075b00be29688fd362cf1cc8777fdb89e235bfc49bd7cda97486eb8b80077db6fb6085f60029a802133c6f17a0ba72ebb1dd8222dcbfbfd560e9da74d9c24eb7bdcd435ab1572b84a7941650f4848"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x58, 0x117, 0x2, 0x42, "14049b0c83fd8dc8250967dcb6f883d47992e5f4f8112ab808052771fd4ffc77ac40a104f406882d0e1294fd1e44b8148d546fb11a37db88be92d3028590b3c932fd"}], 0x2c0, 0x804}, {0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001500)="4895877a4067c02bb174de0a79acb56b702cebc04f1464539920c310a7d69c23be0aad63fdcc2aa663d42c9fda03044dae27cbd2aaa37ce874e5e843be7f810f1036dfa4dea8282fe12182198f91f3ea4d5c721c7f885d69fe2161f28e6f46ced2293461c8d4f152859b61fdf3a89eee72de575d9a8a9099ec94d1724dbef90e94568cfbb987858fca8b2c3869b9979b29455dacc6d6189a312ca19500b534fc4a8170470201b755b272c6489ea20110249c03c8686b5031987798beb49b5f04d3b18b3c413ba2af1a169f94697856001489107fcf73a357648a4dbc926e69917a5a", 0xe2}, {&(0x7f0000001600)="bf005bf10c9f290a9a11fe669bc764cc6aa4d71c27425fc6aea8c53ba72912d7b9f4e65ee0eaaf5141b3f531acdbe66a3503f6c5d9bc0cabb188acd456bb5fe231ea552edfd1ddd36b748f89cccc0f79e494", 0x52}, {&(0x7f0000001680)="2160b21f686c9920822077e62a88fd64fda93c17a97c6d8a85539b86ebf8e87b69813b1b7c219f83ed65e18c3f0af877a4dba378073355c4dfcab483719c4f8147a14991c6dd219b6775f61d4f59273560c4ae90a28b27ad2a6bb8dab2185ed8cf0e881a2610bdeb938fd9d73bee9ba16cf65c1cae9d1056", 0x78}], 0x3, &(0x7f0000001740)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x40, 0x117, 0x2, 0x2b, "342bff47518dd050df6909cfbcd295087218399b1c1f44f441b37d1ed01efef46c12d721475002fadb1ad1"}], 0x58, 0x84}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000017c0)="e4ebd7cde0d4d4200dca48dfdd2c7314b393a8f89e270943f1bcc9d7b4ad1064811af0c6bda1a7d4162c8716a1d3f895ed0bfbec4aba5ba72934ec765bb0666a5ff867c3ddf0218c7f01e4f87ee647546c52d97a7ba7f065e89a696cda5758ecf15bb9feb137f874f9f211f405c6bb5bb19d6dc685e22ef087ed4e8a433d7a45dfd82bbb874cb13f9bc53d0227dc96df2ad5717b2022a54ddf7505ed6e11187306c33f10791f432fa0b2c107520813e1099439e1f15e9f7b05736d2f07131836413a10fd94fa65a3eb80c745b76d4db9c797383726167ac9229dde9fae285ae079559ea02e20530180ad8f2817d9", 0xee}, {&(0x7f00000018c0)="7d084b0987b78c073b1d7ef417d813754bfdb41663251e5bb4e858d0fa5a9c44965e9d157e76d63032664ca74598c4454c0b41b653c26948c46e5513f5e8b2149c308f5b2719fed52ab6979670469bec519648a9dd28c538a38f9e0ead7066c6500506ece78b338ae59dab5c4a51eb2c89791bd94256992a2342937fb2104dd3503ca3ae0279ac6a2b9eecda6ffbbe52777629d33094b69d5b4409ea256e649a0eb7fd995bb726cf24910a11a0c12a26d14e93dcd2410db97896880ee5f843fb03283cb9b636ecac0d3d475aed8fffdaf2", 0xd1}, {&(0x7f00000019c0)="2c7a1c9da4f75b95e99f574139b1b4d838726cd64045a70f6cf1be56171980d86fa741a744384514a545aa3aa18afe65ddb1f68ca85aba93d0b37e922f55d75991a2dd9dc427b00ecdee140111ed6aaa727fd3bc6b0a8dd1996f6d3a1abf806f40b2", 0x62}, {&(0x7f0000001a40)="83f31cf82402ce1508ded7bec5dba3e4e18e9908369c2f326c4e8d4f932bd5f6720699904b616dffd3f9b8933b922c1f2b87f7f39c54529d1de5dac10798fed3c57ad8d05f047fd5811843e3854756f4fbf6408f179268c317fa4456d78fd9f1423fc0d204e9ca4d63c0e32fd8bdea89d19fba518fce5d01", 0x78}, {&(0x7f0000001ac0)="bbe73728b31c0ff059f52d7cff4bc93acd372aa823e571df66d2e99eb402da73b22b30debd01420d1549419c47b89586901d010aeb2f3a980f2e7e2f6cf539008a770e3214426c83a54b1b94c79339a37dbc86b6ac32a7572d184b6d79b1031ea80d51a84eafacc3a7b2bc12cc114636f90ca8510af42ec42604304e110e816410156b5484b1c1fa1e5237047251e597e90ad53eb417321b77d99d576cb637fe2ac04688330cf96765820719387d76d644dc9b67f275661d72a3c1ac6bb4e95dddb296461477fc825190e1eab03b3364519738ca641f6dbf7194a4508b16386b064ccd0cc4490eeb29412b2e98", 0xed}, {&(0x7f0000001bc0)="5e54acba9089d9b0076ef13b60950d9d0cf410617928df4d2ab8561e6207be7c79ef", 0x22}, {&(0x7f0000001c00)="5f795a424521b7f51b240b9066624eeab66423f0b4a539db58b1dded5f955c7daadcb109d49bb812718cc61b47ba5d4ff51a600774c98ce7698f94b8b14732c41e540d45d071ece25a700ce48b75ff4c34408c4f70134f96b56bba5495b95fe5950a9a52a68caf226f7473b116aa4d48658a17637e456a00c6e7b9d77decab992bc02eebdda84f1ef22a543e2ab11977f92bd76121133ee16b1b14b0204ceee2eda0c91be314376f10d607792279608ea383340c87a5d29ad55e5bddb16e0251a24995f1be", 0xc5}, {&(0x7f0000001d00)="31ab7417f26db04e583c65e47362ba5969edf730e1efb1ed53e31622c5715d9be7e0c1b6892aa32d962269fc68dbf10e5a4da1d99f21308d011fd3e97e0af33c48e27f8411ed45e23f3849b947c4f6380d5e0791d8bd5649e0f7f33b831c6950d59d07b47c39869fbd6baeb6f29fe81cd354bb9ed931442eefaf6bf0d5d1cb5e7d574b7cf0d9fb4fd30fad02734c7038ac953d440f3498e4bd14a75e380fc85271291ee58574776128a3", 0xaa}], 0x8, &(0x7f0000001e40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xf8, 0x117, 0x2, 0xe2, "5795a810c5e15d4c1e5158efac8f8df0e589c42101c99b9e8fb0487bd8f5e049b646d01421738455bd67aa383dd6b7e01c3a6f714806f2b3139c67e829c33c4d8fc8957eec3121c88074b33e82cace70906818b7766a22bee6bb48982adfa9db11bd259e51f11d1894b4950dbe1547a5f7b72b5370e536a889837063cb69ba2f6fac3316bddc52644fffa9de5e984f0d717965545fe582a057cc213466b1b5bcc3f7fb5c6137c90f786e721da72d007e297160afaf3aab6c0e3cd92346f333d31dfad03aee0d9e5bc92d52f2242a428c5cb826a4a65d1e4f49e1055b0472ea21034e"}], 0x128, 0x20008804}, {0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001f80)="80227918741f4114f437ebf454cb52647a3386c52e928caba0c903fc26435c9fde59db61af30a92902ef08871850bd29f7e6be6ebbe9dfd5cb287da7d67dc7d511ec5ef3a01e744188449178e12f78e407bf2f06a91bf457d5d552c1ac398ca5183904654c0f5eb0d62bad614fb9b218374718b280c19bc8c11cb290af1d035394dcc17337d8f11f752f2dc613ecdae3c326846d2aaaa0b4e31d4018f1b9fb68a9464410d2d5836eeee7a6c44d9c9d85ad858604646032e16adaf9983b5acbca4a00d1e0c7ac8ce126582e3a2f7bb5", 0xcf}, {&(0x7f0000002080)="2733efde9313e799b71a6350ea644afe62fda6ff473c1c88786dc3c0bf0a0393b70080af8dec8f9f9468682999af1deb7d8f3e5f3a02d3dadfdbcd12723b4b70fb7467472fef1667835c2c006090a88a671fa9eba7330ad8d9cc4e976d7a8563ce52c2d7d4c90d9632dcefd047c2baaa0754eb3ee7791cadd62f0810453907f79c5fe0a6cedbbb90b6015b39c520f4cca18d52c76c4d478264dfb192c250c61a039f04dbc0a62cae218eaa0500822d58bb9c073d294501fef26a71cb5772c5dce2b4264a7459079ef26a14a3b46f62b057a636aa1f54f365e80f898221141f20b066", 0xe2}, {&(0x7f0000002180)="cc0718c74f9f5e5ac223ff77a41cf914c8ee28f0403d3311f61dbbe60788512ffc44f1c1e9699f28e9b33bbf7a983fdd3df145310728d4c94fb9a9e3e49dfecb6871833a2d2a86b7bb6764cb8010f81dff0937cc94e6929afa5fcd2529fc4c9b14251ace13afea0c4375397d9acf317581e23b92c6e889b986354fe7866ef3cdac8e0e4ac4ed52e583f8ff45c07400b1", 0x90}, {&(0x7f0000002240)="e28722e34f590e05ba77df8222ec882c1c6b4af8e0c55c8010107f22bbc212a7840accae9d40547b91cf1fdf730c164a7f8a230d32a1aaa17bb3d0ad05c295353639df672ff868ebc77786e713f46e7fa6c9e739a1695f23cf83d39b8bfd9d9817d3998c87bc2f91b700c12a02f529462694491627394d2485fd762d6a67f8b57a16095277910a3bb1f766b8", 0x8c}, {&(0x7f0000002300)="a1b9a05d4186a5d3df2e1ddf7a71a42b72b8d4d54483ec0f37a9ea2439f4c15a315e22c0233d7396fdbab6b9216dba50174787c9c70b6540ee6830e043da87da02d008eeb25ce5fb30adedd5882ec16c5354fd8f65878b269d6d6d7863445c1b9956f516d3ee0385974c8e85b62fe935077c0e84ad5de917afffc66f02ed412052f44ab0bc926d448c94f8d71a84f5c76708e97ebd332b3558f57858ae12d22a9504b10b2d3f46cabc9a3bbbc6127de5f016cd229088b70478f43d8aa4761258c812250a2629e9a3703fb3b66e612fa144aeaeda2d73a961fb82b02aa176468d539a730c", 0xe4}, {&(0x7f0000002400)="89d11e0ac82e7749788e25d8270c66ed5451c38ad936d496161a43241b0ad4a4eac6d7b8358ffec3d4d70b2b6cb5b44b81b694556754d378431edccc778ab4e59d66dddf95448de8274241e7a4e1375d93476489704aee75d21767e7e6238a2e64b8928429f50bc9b0cb430e3bffa97aa0e137363f048473b32e3dbe", 0x7c}], 0x6, &(0x7f00000027c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x98, 0x117, 0x2, 0x7e, "cae023a7ac697bea8d511fa16c6f34a6943b68c44de22f10bf8c02f678ede6dbdc4bb7f13a6ab59045722ea910957bb7d38b00a965b3f2c5a9cd30f40dbc5ced3ac4b37495b243092e8873a18c30b40420081480b64939693e3c26349e3b503408597f38ee5de71e35d85ae95bbdb0f9a6baf2cf2a710b01d2e56488ee12"}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7a, "a1f3640d1e136e513968f0f25170115af17659ff46e47754679f0a9739b72e4ed78afdcc1b85811944dab7dab1e62a4c2e713a5eb5956915aff83deacaf06b6a6ba04fc2a57c5acffe16b0b0a9b0e56b03120321a45d7271cf3c3ea117fb67ff6f60a20753b9a5661f350cfb0b6fb8b4f7fd6e9fa1a8b2b51210"}], 0x170, 0x20008041}], 0x8, 0x1000c000) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r5, 0x0) 12:33:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0203000010000000000000000000000005000600000000000a0000000000000000000000000000000000ffffe000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000ff020013cb654e86eef0d9b100000000000000000000000001000000000000000001001500000000"], 0x80}}, 0x0) 12:33:37 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:37 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) set_tid_address(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000100)={0x4, 0x101, {0x51, 0x20, 0x9, {0x1, 0x120}, {0x3, 0x7}, @const={0x7f, {0x0, 0x100, 0x2, 0x8}}}, {0x57, 0x81, 0x7b, {0x3, 0xfff}, {0x4, 0x5}, @rumble={0x4, 0x3}}}) io_setup(0xc32f, &(0x7f0000001140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x1000001, 0x4012, r4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:33:37 executing program 2: syz_emit_ethernet(0x1f, &(0x7f0000000000)={@random="25d4e7b3214c", @remote, @val={@void}, {@llc={0x4, {@snap={0xaa, 0xab, "81", '92V', 0x17, "6d5ff968ff"}}}}}, 0x0) [ 275.108739] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fcde4e57d48d9c65ba2af713db6be9a89e578fdfc3145792f99e6c53e1f07382e2a8c88f3b7b2f90aabdf5dee63f00835157b29690c133ef944828d38a83d6bb4812b34644a86dabcc5b3831f1614c9fb46047e4b256909ea3b62afa6bea7bf6c24f4ac885c70a6d7e23a052808eb26cb11176da6eed8f062d3ab366935b8e9d9bea7de4b0c41d072f"], 0x1) sendfile(r0, r1, 0x0, 0x200fff) 12:33:37 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 275.313199] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) 12:33:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000203010002000270fff8", 0x16}, {0x0, 0x0, 0x7ff}], 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x10, 0x6, 0x7}, &(0x7f0000000080)=0x18) [ 275.360341] audit: type=1400 audit(1584621217.437:83): avc: denied { map } for pid=9613 comm="syz-executor.0" path="socket:[35113]" dev="sockfs" ino=35113 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 [ 275.399284] FAT-fs (loop5): Filesystem has been set read-only [ 275.482710] audit: type=1800 audit(1584621217.527:84): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16704 res=0 [ 275.486246] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 275.512482] FAT-fs (loop2): bogus sectors per cluster 3 [ 275.541324] FAT-fs (loop2): Can't find a valid FAT filesystem 12:33:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffd89338706972690eb446cfc0ffffff000000000900010068667363"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x26, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0xe, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000080)="af81c399ae261b69b8b948d51dffb7240491c2b942ba904895ad39f223fb01f5cbb4f79a3902ff2044c9c183992916c99f988811a8505181c20d0152198ae9d1964d13aea366ac52e2b56db1f46238f4", 0x50}, {&(0x7f0000000480)="b1e60b3d091f4538a0456fcdc6a4c4756f0b32280ad4c86223e2a6c2a3b4d2e259e420b7508133b16f4855bbe54074529071be640054e7346b0e36904ee510ca765440fc8f3a1ce2105e1cac0f2353a591c2e5fc4c03eec4c0ff72bfa4fedcedb4ebef426ec2c6c7a0d11fad7d1ebbc9a83c90ea6d5aa4098d7334b9", 0x7c}, {&(0x7f0000000500)="b7e89b9c8bf8a8470467fc17b206033e8ecc2040f9d8efad79683295783bb781723869d017f0e536a0119f64a73054fb9b64292111ae6b2221d9647edf37e3ff1e98e1c3900ce88064c4bcb943984c0f426d132bda3cd631c9c9c64811bafb961696cab81bd882bbeba5113d6760d1a67e200ea8ff685f11c69db5484c664f4336b966b9e5d09f668b", 0x89}, {&(0x7f00000005c0)="878bd0f7e4d885a9b202ae5609b69732bb35cbcff7f49e709077d5f684b54c7b5ef431067f5da04db8774a9577b67e3f3e65b3766b7d5536f8c6f01841400a262c6d72086fc997c4c342c6b264ead83bfbcc21d1e666972ea6366524c2ea0871b9ac198db7", 0x65}, {&(0x7f0000000640)="b029d145b664cb24d61a3347a60e81d0c95bd7cc0e1742b904796e5ad58b47dbedecb99c2211c93a13fded31fe830e67a1ae21c1c134c0cb1474c7663ed8ef12ae9566bffa678f25198608fc7109376074e225254a212304f306ddb6bee275dc5329efac9a22852bebba37a046ea17b34eca098e984548d77e2b89652fbdf91fef3df513a83c5a1131f59ab6e84c3d85329b6703a430047498fce812dce4e081239d8ae83ba9", 0xa6}, {&(0x7f0000000740)="8b1c93b1269315f247afe7492db2982786e9c26a30f79d90d44196791ddf6245fe8cba1727adf1ce7b854ce791416711d4b3c7240fe30188da7c5ec936a2431b11b1efba55d5d4cee288fe52a95aa501a0909640f199c0387bfec847a591cb156e7efce79ca3cdf7315d83b5ffb98609178e85d818cce5d01e420b381c4dd208ea8a39d12acc446b2709", 0x8a}, {&(0x7f0000000800)="2d7549375192c2c0690ab4a49ce582c1a780701351b51a2ac73281705b2e5fcb863da33841d2a4ae9a22cecf872fb2be56dcbaad8f949f597e01d4fc71f31497393732eff8c56c662b118c3d7883f7cadac11236adfc9d988e110fd473962548a1024185f0351b126d4e339ebe88dd09aee4ab7cfc07abbea7718e0b1eefadf8", 0x80}, {&(0x7f0000000880)="d69b5f00c4516d51c87979b11075c353231dff5934e9127513902c3c8b5b46c316a40bdb25d0ad592e8d4bea9cd98ecd6017e9808bc9c8d2284008da049b2acfec0995c83fff87d77d3991b5eadc15dbcd70888adf6229380e71827e9420efbf4775fd5a87e95c4542c6d43a333ff7ebbc8dfa032d4ec5acc036844b424279407af2f90369ef8f8631da", 0x8a}], 0x8, &(0x7f00000009c0)=[@iv={0x58, 0x117, 0x2, 0x42, "6a0837f959ee0f4119c95fd08a33612c8aa0093830d1785c53b612922af05c57d67fe7e1267e637da69b9546f4775a5629076520e7346bed8e989305ddd14c351f20"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xc563}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x893d1aa72452c561}], 0xb8, 0x24000082}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="b81132234e79c276e14a1878a0385b5612bef9e7f3efdc884cbd5354d8506b273869979c8c3c5dcc8d5718aa0248c132317bee11728ab573f4ce610cec665c117cb155f626b5eb7fbbbc5b54f1cf876583be6882039bc48fdab9817cf3fe79a5eba05df765ee4b018d250878b8d8ca8eae667b9a50cc9f84b209e72ed79f291fffbbee865e8bf26aac4ed83dbd720e302d16e02bbdc9d30149299219278b3fe21104615648d0ab8687a5dcfdc8a9b9d66b114cb1fa73e55c", 0xb8}, {&(0x7f0000000b40)="0b4e81c0b1d3b194c77f44e063d98fec2ba093f62a451432531b8386b2e3b7b18582715c9281fb5f380603878fb6179cbf2cac03a4f33983f210f3ca1c2610d87541b1b98975c600ddc84e791dd31367226ff80c71cc4f4b6a563d7187e348752904deb0df4edc99bafa299cd926e54b6564adc4014d800a9add122c93e89fc467dea0064a103b2ad2bcee86bd1fb376d29af8844bbe75141481fc504b807f0dc9a6ba49001693342bd626b8c4e9", 0xae}, {&(0x7f0000000c00)="f2068ea5e276fba4ba7b9356dcb2f5b6d2e66516794b3f0968b1e388053dd2b00100e031f9035718554a958732eb4e60153aaca0e617f2f5068a395b8c288bbc5136fcc260a52551158f45a9e10e8e39430b708e109f50439db701df60854f73b80fb844fd16f40e08fa36da66427e7cb1d16d63b0cbd05c96858cbeac3ca6c1c79c3bbc630c2fc16590a390c8e7e8141c7f6215", 0x94}, {&(0x7f0000000340)="e049e772b1fd4d8e3cf3e74c4ecf6a3e5a34f256df3eba48d310fd909f76aa2197a0765d68d05e1642", 0x29}], 0x4, &(0x7f0000000d00)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x85}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d40)="38640ff41049cbbc452240a6404e726d18b03d5df099628d4473329598f8ae0102115bbf0f7b271ab3af05823d647be55e2ec70f791288e0184820aef55df8ff93199792675cb2931e24d857664abf165e115de34ffa7dce41c950438d4040309ca02f5f4e9af691cb1a14140ea57fbacbdbe762bd9c8a3f6191d2cfea8746110d9a1ff48b3aa10f3c3bb4e847b42613e12eb700ec9d529a", 0x98}, {&(0x7f0000000e00)="293f803cefc0029a7a91f68e266987d6e73f56ce4c067e4cc1c463779111172a36a4e5b1bed556ce2682ce24532e43cab1ac58dcbeb39920ff6431be9f15552f6e2be5e8660627d5b4a9fe3c1b2629412082e498b346445fe6f63e798c77647c9f4b74bc340f7e346b83f4feb8ed44bb9eaab1545751c1dad6f4ee121a3663f5540e63be6a7a897c8da85befa0ffcc577a0ac1fc8cb2e15f3859c97550b78cd6eacda2c828a9607b471914f09a0cab30c0725c3c9906dd29d2bc3a19a11adb438ccd39e4b79baacfd2f7637c7a1f8c49d05156e6fa7a9db6c39379701d49900424b6a3", 0xe3}, {&(0x7f0000000f00)="70bd5e5e615706d2b86d85c4a0592d7624136a3495a252f3c440f1bbf7b527f31327bb5704f39c2f8297ce77a095779c60e8b26d86fd1960c413fe73fba80449c9def1e6167807d7bb", 0x49}], 0x3, 0x0, 0x0, 0x44801}, {0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=[@iv={0xd0, 0x117, 0x2, 0xb9, "d5efbc72eda897bad46ad8a1850694c2a8e5d57ec644ab34ee02a76c15b8a40930082c63885f903c9724b55295633ee52b9e42082ce6a43ba4a09144144e23057016a1af9de173bbfa1a0027ae40fb65fe689cb5914dabae6a9d7865abe3b94a16403a8a7a55aea26adb5f7d36df37182f9b7c6cd219f575fd15d23a1c88f75fc35a8184da3fa7fc67d807c06b5af1c0ed5122e2c80058e80bd55cc53eba9423cd4f1241883288f6b410803771e6416f4ef36663e3bc9fed47"}], 0xd0, 0x20004005}, {0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001100)="d4d3346680c6240fb7d13117ccbf364c6417c93375d822a4f2b673e0312b9c8e7155da98aa8ae3c00bee35564e59f2a719d6a81609f6eb042733f21a2df883d4460d341eb919fcf2299757bc6fe46997132cfd4a7ecc14d49591b2b33bc46ccf8d49b5215b3ed149391e6692664b3721b9b76d29f550ee6109a457d5c5a0f676d3ed385ba084cd95854879e3d0ceaa25eb5c228e3f881f9a2900f1f3c9836fa3247030ae93e085fe378abd219e46e2723497245cea", 0xb5}, {&(0x7f00000011c0)="26714736d7ebc6292fa22ec3b8af90e798a92186e466af1c5afaf18c45", 0x1d}], 0x2, &(0x7f0000001240)=[@iv={0x20, 0x117, 0x2, 0xa, "ca6a0eb68eb40b4bb0a3"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xf178}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xd0, 0x117, 0x2, 0xb5, "e088439cbb58e9e02031a9bd0822eedb324ef2c1af50187bf5b24bcecd8f52afbd82615a37998fc53c7800e49e8f8afee578289206304f831a39655a6ab98e874a6bc96c56fab2e3b94f260641e84f88c7e33db6b587919d87a034b7a42251f0952c8dc15e7d40107d9ada7b912cab82489521701a9503ae71f64ecaf9d3c3fe8d940c7bcd45510e72f51a506cfc9469b08cc328181272752c401de4bc7154b0b9ae040764bd4f63455eeff49b359927482ea038db"}, @iv={0x100, 0x117, 0x2, 0xe5, "8e7421e2d6f0db46b11ac2c39ef3660dc26215e7c71c00144c34134465684c715b54a43c860b15f017c0f85929fa5d794f74f6a742d0b99948fe228beb2eb43591f3c50cb6ad8e788379b1e997ec86f2b59553ba9dabfcfcac404b9e1e3f3329881d9882c4c98d49ccf23c43e3921918d4debd202b92ce0d44e14fb16d7821c14d322d1064d500703f55c71bf969140b2308807211e58075b00be29688fd362cf1cc8777fdb89e235bfc49bd7cda97486eb8b80077db6fb6085f60029a802133c6f17a0ba72ebb1dd8222dcbfbfd560e9da74d9c24eb7bdcd435ab1572b84a7941650f4848"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x58, 0x117, 0x2, 0x42, "14049b0c83fd8dc8250967dcb6f883d47992e5f4f8112ab808052771fd4ffc77ac40a104f406882d0e1294fd1e44b8148d546fb11a37db88be92d3028590b3c932fd"}], 0x2c0, 0x804}, {0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001500)="4895877a4067c02bb174de0a79acb56b702cebc04f1464539920c310a7d69c23be0aad63fdcc2aa663d42c9fda03044dae27cbd2aaa37ce874e5e843be7f810f1036dfa4dea8282fe12182198f91f3ea4d5c721c7f885d69fe2161f28e6f46ced2293461c8d4f152859b61fdf3a89eee72de575d9a8a9099ec94d1724dbef90e94568cfbb987858fca8b2c3869b9979b29455dacc6d6189a312ca19500b534fc4a8170470201b755b272c6489ea20110249c03c8686b5031987798beb49b5f04d3b18b3c413ba2af1a169f94697856001489107fcf73a357648a4dbc926e69917a5a", 0xe2}, {&(0x7f0000001600)="bf005bf10c9f290a9a11fe669bc764cc6aa4d71c27425fc6aea8c53ba72912d7b9f4e65ee0eaaf5141b3f531acdbe66a3503f6c5d9bc0cabb188acd456bb5fe231ea552edfd1ddd36b748f89cccc0f79e494", 0x52}, {&(0x7f0000001680)="2160b21f686c9920822077e62a88fd64fda93c17a97c6d8a85539b86ebf8e87b69813b1b7c219f83ed65e18c3f0af877a4dba378073355c4dfcab483719c4f8147a14991c6dd219b6775f61d4f59273560c4ae90a28b27ad2a6bb8dab2185ed8cf0e881a2610bdeb938fd9d73bee9ba16cf65c1cae9d1056", 0x78}], 0x3, &(0x7f0000001740)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x40, 0x117, 0x2, 0x2b, "342bff47518dd050df6909cfbcd295087218399b1c1f44f441b37d1ed01efef46c12d721475002fadb1ad1"}], 0x58, 0x84}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000017c0)="e4ebd7cde0d4d4200dca48dfdd2c7314b393a8f89e270943f1bcc9d7b4ad1064811af0c6bda1a7d4162c8716a1d3f895ed0bfbec4aba5ba72934ec765bb0666a5ff867c3ddf0218c7f01e4f87ee647546c52d97a7ba7f065e89a696cda5758ecf15bb9feb137f874f9f211f405c6bb5bb19d6dc685e22ef087ed4e8a433d7a45dfd82bbb874cb13f9bc53d0227dc96df2ad5717b2022a54ddf7505ed6e11187306c33f10791f432fa0b2c107520813e1099439e1f15e9f7b05736d2f07131836413a10fd94fa65a3eb80c745b76d4db9c797383726167ac9229dde9fae285ae079559ea02e20530180ad8f2817d9", 0xee}, {&(0x7f00000018c0)="7d084b0987b78c073b1d7ef417d813754bfdb41663251e5bb4e858d0fa5a9c44965e9d157e76d63032664ca74598c4454c0b41b653c26948c46e5513f5e8b2149c308f5b2719fed52ab6979670469bec519648a9dd28c538a38f9e0ead7066c6500506ece78b338ae59dab5c4a51eb2c89791bd94256992a2342937fb2104dd3503ca3ae0279ac6a2b9eecda6ffbbe52777629d33094b69d5b4409ea256e649a0eb7fd995bb726cf24910a11a0c12a26d14e93dcd2410db97896880ee5f843fb03283cb9b636ecac0d3d475aed8fffdaf2", 0xd1}, {&(0x7f00000019c0)="2c7a1c9da4f75b95e99f574139b1b4d838726cd64045a70f6cf1be56171980d86fa741a744384514a545aa3aa18afe65ddb1f68ca85aba93d0b37e922f55d75991a2dd9dc427b00ecdee140111ed6aaa727fd3bc6b0a8dd1996f6d3a1abf806f40b2", 0x62}, {&(0x7f0000001a40)="83f31cf82402ce1508ded7bec5dba3e4e18e9908369c2f326c4e8d4f932bd5f6720699904b616dffd3f9b8933b922c1f2b87f7f39c54529d1de5dac10798fed3c57ad8d05f047fd5811843e3854756f4fbf6408f179268c317fa4456d78fd9f1423fc0d204e9ca4d63c0e32fd8bdea89d19fba518fce5d01", 0x78}, {&(0x7f0000001ac0)="bbe73728b31c0ff059f52d7cff4bc93acd372aa823e571df66d2e99eb402da73b22b30debd01420d1549419c47b89586901d010aeb2f3a980f2e7e2f6cf539008a770e3214426c83a54b1b94c79339a37dbc86b6ac32a7572d184b6d79b1031ea80d51a84eafacc3a7b2bc12cc114636f90ca8510af42ec42604304e110e816410156b5484b1c1fa1e5237047251e597e90ad53eb417321b77d99d576cb637fe2ac04688330cf96765820719387d76d644dc9b67f275661d72a3c1ac6bb4e95dddb296461477fc825190e1eab03b3364519738ca641f6dbf7194a4508b16386b064ccd0cc4490eeb29412b2e98", 0xed}, {&(0x7f0000001bc0)="5e54acba9089d9b0076ef13b60950d9d0cf410617928df4d2ab8561e6207be7c79ef", 0x22}, {&(0x7f0000001c00)="5f795a424521b7f51b240b9066624eeab66423f0b4a539db58b1dded5f955c7daadcb109d49bb812718cc61b47ba5d4ff51a600774c98ce7698f94b8b14732c41e540d45d071ece25a700ce48b75ff4c34408c4f70134f96b56bba5495b95fe5950a9a52a68caf226f7473b116aa4d48658a17637e456a00c6e7b9d77decab992bc02eebdda84f1ef22a543e2ab11977f92bd76121133ee16b1b14b0204ceee2eda0c91be314376f10d607792279608ea383340c87a5d29ad55e5bddb16e0251a24995f1be", 0xc5}, {&(0x7f0000001d00)="31ab7417f26db04e583c65e47362ba5969edf730e1efb1ed53e31622c5715d9be7e0c1b6892aa32d962269fc68dbf10e5a4da1d99f21308d011fd3e97e0af33c48e27f8411ed45e23f3849b947c4f6380d5e0791d8bd5649e0f7f33b831c6950d59d07b47c39869fbd6baeb6f29fe81cd354bb9ed931442eefaf6bf0d5d1cb5e7d574b7cf0d9fb4fd30fad02734c7038ac953d440f3498e4bd14a75e380fc85271291ee58574776128a3", 0xaa}], 0x8, &(0x7f0000001e40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xf8, 0x117, 0x2, 0xe2, "5795a810c5e15d4c1e5158efac8f8df0e589c42101c99b9e8fb0487bd8f5e049b646d01421738455bd67aa383dd6b7e01c3a6f714806f2b3139c67e829c33c4d8fc8957eec3121c88074b33e82cace70906818b7766a22bee6bb48982adfa9db11bd259e51f11d1894b4950dbe1547a5f7b72b5370e536a889837063cb69ba2f6fac3316bddc52644fffa9de5e984f0d717965545fe582a057cc213466b1b5bcc3f7fb5c6137c90f786e721da72d007e297160afaf3aab6c0e3cd92346f333d31dfad03aee0d9e5bc92d52f2242a428c5cb826a4a65d1e4f49e1055b0472ea21034e"}], 0x128, 0x20008804}, {0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001f80)="80227918741f4114f437ebf454cb52647a3386c52e928caba0c903fc26435c9fde59db61af30a92902ef08871850bd29f7e6be6ebbe9dfd5cb287da7d67dc7d511ec5ef3a01e744188449178e12f78e407bf2f06a91bf457d5d552c1ac398ca5183904654c0f5eb0d62bad614fb9b218374718b280c19bc8c11cb290af1d035394dcc17337d8f11f752f2dc613ecdae3c326846d2aaaa0b4e31d4018f1b9fb68a9464410d2d5836eeee7a6c44d9c9d85ad858604646032e16adaf9983b5acbca4a00d1e0c7ac8ce126582e3a2f7bb5", 0xcf}, {&(0x7f0000002080)="2733efde9313e799b71a6350ea644afe62fda6ff473c1c88786dc3c0bf0a0393b70080af8dec8f9f9468682999af1deb7d8f3e5f3a02d3dadfdbcd12723b4b70fb7467472fef1667835c2c006090a88a671fa9eba7330ad8d9cc4e976d7a8563ce52c2d7d4c90d9632dcefd047c2baaa0754eb3ee7791cadd62f0810453907f79c5fe0a6cedbbb90b6015b39c520f4cca18d52c76c4d478264dfb192c250c61a039f04dbc0a62cae218eaa0500822d58bb9c073d294501fef26a71cb5772c5dce2b4264a7459079ef26a14a3b46f62b057a636aa1f54f365e80f898221141f20b066", 0xe2}, {&(0x7f0000002180)="cc0718c74f9f5e5ac223ff77a41cf914c8ee28f0403d3311f61dbbe60788512ffc44f1c1e9699f28e9b33bbf7a983fdd3df145310728d4c94fb9a9e3e49dfecb6871833a2d2a86b7bb6764cb8010f81dff0937cc94e6929afa5fcd2529fc4c9b14251ace13afea0c4375397d9acf317581e23b92c6e889b986354fe7866ef3cdac8e0e4ac4ed52e583f8ff45c07400b1", 0x90}, {&(0x7f0000002240)="e28722e34f590e05ba77df8222ec882c1c6b4af8e0c55c8010107f22bbc212a7840accae9d40547b91cf1fdf730c164a7f8a230d32a1aaa17bb3d0ad05c295353639df672ff868ebc77786e713f46e7fa6c9e739a1695f23cf83d39b8bfd9d9817d3998c87bc2f91b700c12a02f529462694491627394d2485fd762d6a67f8b57a16095277910a3bb1f766b8", 0x8c}, {&(0x7f0000002300)="a1b9a05d4186a5d3df2e1ddf7a71a42b72b8d4d54483ec0f37a9ea2439f4c15a315e22c0233d7396fdbab6b9216dba50174787c9c70b6540ee6830e043da87da02d008eeb25ce5fb30adedd5882ec16c5354fd8f65878b269d6d6d7863445c1b9956f516d3ee0385974c8e85b62fe935077c0e84ad5de917afffc66f02ed412052f44ab0bc926d448c94f8d71a84f5c76708e97ebd332b3558f57858ae12d22a9504b10b2d3f46cabc9a3bbbc6127de5f016cd229088b70478f43d8aa4761258c812250a2629e9a3703fb3b66e612fa144aeaeda2d73a961fb82b02aa176468d539a730c", 0xe4}, {&(0x7f0000002400)="89d11e0ac82e7749788e25d8270c66ed5451c38ad936d496161a43241b0ad4a4eac6d7b8358ffec3d4d70b2b6cb5b44b81b694556754d378431edccc778ab4e59d66dddf95448de8274241e7a4e1375d93476489704aee75d21767e7e6238a2e64b8928429f50bc9b0cb430e3bffa97aa0e137363f048473b32e3dbe", 0x7c}], 0x6, &(0x7f00000027c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x98, 0x117, 0x2, 0x7e, "cae023a7ac697bea8d511fa16c6f34a6943b68c44de22f10bf8c02f678ede6dbdc4bb7f13a6ab59045722ea910957bb7d38b00a965b3f2c5a9cd30f40dbc5ced3ac4b37495b243092e8873a18c30b40420081480b64939693e3c26349e3b503408597f38ee5de71e35d85ae95bbdb0f9a6baf2cf2a710b01d2e56488ee12"}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7a, "a1f3640d1e136e513968f0f25170115af17659ff46e47754679f0a9739b72e4ed78afdcc1b85811944dab7dab1e62a4c2e713a5eb5956915aff83deacaf06b6a6ba04fc2a57c5acffe16b0b0a9b0e56b03120321a45d7271cf3c3ea117fb67ff6f60a20753b9a5661f350cfb0b6fb8b4f7fd6e9fa1a8b2b51210"}], 0x170, 0x20008041}], 0x8, 0x1000c000) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r5, 0x0) 12:33:37 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0xff02160) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') mmap(&(0x7f0000001000/0x12000)=nil, 0x12000, 0x81, 0x11, r0, 0x0) 12:33:37 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 275.718928] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 275.962745] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 275.981337] audit: type=1804 audit(1584621218.057:85): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir189133628/syzkaller.48Fz4j/32/file0/file0" dev="ramfs" ino=35850 res=1 12:33:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000100)={@fixed={[], 0x12}, 0x1, 0x0, 0x1}) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000480)={0xfffffffffffffffd}) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 12:33:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000640)='vfat\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='uni_xlateM0,\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) sendto$unix(r0, &(0x7f0000000280)="840fd9d8ad1b16609aa38c9bf447c3baa7819929d1e5e471416fe930ccd4acdbb5fb0805366773ef6cbcc93c664a331018076b7911479f6cbbfbcc0133f454a8650e53ea4ccf45a3a31afc37addea87ae99329663201", 0x56, 0x18000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d0, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_procfs(r1, &(0x7f00000003c0)='net/dev_snmp6\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) 12:33:38 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 276.170642] FAT-fs (loop2): Unrecognized mount option "uni_xlateM0" or missing value [ 276.225373] audit: type=1800 audit(1584621218.307:86): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16704 res=0 [ 276.230205] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:38 executing program 1: getpeername$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0xfef7}], 0x8084, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r8, @ANYBLOB="000000000000ebff0b002b80080003000a000000"], 0x2c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1d8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xc007}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:33:38 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 276.711808] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. 12:33:38 executing program 1: open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0xb000000, r0, 0xfffffff4, 0x8001, 0x5}) 12:33:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x57, r4}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'nr0\x00', 0x2}) [ 276.820578] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:39 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 276.968464] FAT-fs (loop2): Unrecognized mount option "uni_xlateM0" or missing value 12:33:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000040)) [ 277.184287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 277.221452] FAT-fs (loop4): Filesystem has been set read-only [ 277.222977] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 277.232729] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970769) 12:33:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'syz_tun\x00'}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'vcan0\x00', 0x1}, 0x18) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', r8}) 12:33:39 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8ac) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000000000000000000000f000000360002000800010000000000040004000800020000000000080002000000000008000100000000002c00070008000200000000000c000400000000000000000008000100000000000c00040009000000f00000000c000900083833908b3bf25f2a0049ff7146bba4313709838c36d0349336023db791bbc5e33563cea7a6dfca993b53531c594fb0497af2467210779b897067d569334a96811fe8ee075ca70be9f4fab40fea2c65abd6b0a45add821e04b1e5f8c9bfa8edb80a2f0035acdf9dcee1c4cc9273070c7fe32b414d6078b61ded4088a23c4685d4c331cab200be33bb28b3"], 0x3}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001", 0x18}], 0x1}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) [ 277.360602] XFS (loop5): Invalid superblock magic number [ 277.444966] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 12:33:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x57, r4}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'nr0\x00', 0x2}) [ 277.616850] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:39 executing program 1: getrusage(0x7ffffffffffffffe, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') sendfile(r0, r2, 0x0, 0xedc0) syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') r3 = socket(0x10, 0x0, 0x0) write(r3, &(0x7f000018efdc)="140000001a001f0214f9f4070009040081000710", 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000003c0)=0x81, &(0x7f0000000400)=0x2) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r4, 0x101, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x20}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_WIPHY={0x8}]}, 0x88}}, 0xa0) io_setup(0x0, 0x0) 12:33:39 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:40 executing program 2: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_setup(0x3, &(0x7f0000000000)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x4, @addr=0x4}, 0x8, 0x0, 0x7ff}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$caif_seqpacket(0x25, 0x5, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getpid() connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, 0x1, {{0x895d, 0x9}}}, 0x28) unshare(0x40000000) [ 277.866820] XFS (loop5): Invalid superblock magic number [ 277.941132] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x57, r4}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'nr0\x00', 0x2}) [ 277.991150] IPVS: ftp: loaded support on port[0] = 21 12:33:40 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000580)={'security\x00', 0xfd, "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"}, &(0x7f0000000040)=0x121) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004009632977fbac14140de934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) 12:33:40 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 278.234068] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 278.286259] XFS (loop5): Invalid superblock magic number [ 278.337125] IPVS: ftp: loaded support on port[0] = 21 12:33:40 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x1410, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb0, 0x0, @perf_bp={0x0}, 0x0, 0xd8b6, 0x0, 0x0, 0x3ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001a40)={"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"}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x10000, 0x0) fremovexattr(r6, &(0x7f0000000140)=@known='trusted.overlay.origin\x00') getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(0x0, 0x0, 0x0) r7 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r7, 0x0) [ 278.386804] audit: type=1400 audit(1584621220.467:87): avc: denied { prog_run } for pid=9767 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 12:33:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x57, r4}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'nr0\x00', 0x2}) [ 278.453198] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:40 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r1 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:40 executing program 1: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_addrs=@nfc={0x27, 0x1, 0x2, 0x54e561ffbf70c566}}) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") [ 278.708491] XFS (loop5): Invalid superblock magic number 12:33:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xffffffff) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) tgkill(0xffffffffffffffff, r1, 0x0) [ 278.792713] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x57, r4}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) socket$inet6_udplite(0xa, 0x2, 0x88) 12:33:41 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x40, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) 12:33:41 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 279.115305] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 279.165267] XFS (loop5): Invalid superblock magic number 12:33:41 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x57, r4}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:41 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x12, r0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x3]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400000, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x8ac) ioctl(r4, 0xc0884113, &(0x7f0000000140)="12f2f8e11266655056b55927a409436bbe08e3fb1fc97f331f86ce71d3c43a9ca944a1a4a49887220b0906167af7b02e8814c100000000c530650df18839610f6597c2d8ede79934b150ee5371a8c669ccc6fa9fad6d5cb9ebbe2b8b7a7f7708f1440618fcd76b3ebf8bcdd7e1d6e65f7f0001fa19d72391801517857dcf7fd16304286b7d97689e08b1089dfc4668bd40676a63") [ 279.483358] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 279.570188] XFS (loop5): Invalid superblock magic number 12:33:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) umount2(&(0x7f00000001c0)='./bus\x00', 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000b00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000203010800000000000002034000000401080003400000000809000200000002000000000008000100010000280800044000000026c250378e000000180000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x60058080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151842, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/14) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4020000000010046) 12:33:41 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:41 executing program 1: socket$netlink(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000040)={{0x5, 0x0, @descriptor="ea4980adc2dd4a21"}, 0x2f, [], "ff1aed759087b96f3a3ecd281f4fdb0a306763123f1f2c342ba0c2b040a59905746bbd37d305319768f1d4e493362a"}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7d30c03ee2e3fd8f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x12}]}}}]}, 0x3c}}, 0x0) [ 279.864257] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:42 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x3, 0xafd4, 0x23}, 0x8) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_FD1={0x8, 0x2, r5}]}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) [ 280.018937] XFS (loop5): Invalid superblock magic number 12:33:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 280.170587] overlayfs: failed to resolve './file0': -2 [ 280.416152] XFS (loop5): Invalid superblock magic number 12:33:43 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000ffffffff", 0x58}], 0x1) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:33:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = dup(r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x201, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10081}, 0x20004090) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x27f, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400040401000200027400f8", 0x16}], 0x0, 0x0) 12:33:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ebc20000000000000000150000eb130001800d49f77c2764703a73797a3100000000"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x16c, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7abcaa2e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x236ab54a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5478}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1baf4e69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x441bad0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42549da1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b5f0102}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d0a4e71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45322971}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f7febfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5313e64a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x975b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca23}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5deb16f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x576c8e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54e70cb0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd67e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x488d2e63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70f39a01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b53c3bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe903}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5807}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4001}, 0xc0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c4, r5, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540c5a19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x718601a6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62949a36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x949f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x606d7889}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5893389b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2de968f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43a1559b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198f099b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a97ec04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13f265fb}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3add2069}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428fa772}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x667}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x997a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d83b24c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef00}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc54a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16d7fb06}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8eb9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x570b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59899f51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd155}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddd0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ef15b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52bfe81d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfab0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23abbadb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653ff304}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x617c380a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68d6133b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a8c8110}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1234}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5508}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10cf}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000040}, 0x30) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000100)="c7d7367fd9df633a25ed1598102b73ff6deb86a08ec1f32aec40c448fe1f12f33a8395e77b790158c76ff70a7c6a05c666dd987b89011ec49eaaec5f5d55d08a33bda42e7bead2", &(0x7f0000000000)=""/38, &(0x7f0000000180)="5b534d73eb0905b668ba7b144900bdec86410835741aa501d604", &(0x7f00000001c0)="00c4156f0b44a1641023d5146a6803257c84ca95641cfcb6e980de86ce2d8b27dff875db6100a590d307160f27d9a7862756c960286056dbd8658ba5f658", 0x3, r0, 0x4}, 0x38) execveat(r0, &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x0, 0x1000) 12:33:43 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580), 0x0, 0x9}], 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000140)='./bus\x00', 0x10000, 0x7, &(0x7f0000000600)=[{&(0x7f0000000180)="f7fd163f3d810b0b4ec095ee218c0fc7f5459e38ebb65f88e93d66c083bd7017c3c1a4beedcae48b1bb1571380b1a0bd1d6fbee84c5836c4677ba10adff1b5e487eb780f447f8b15ceb8cb115dd5a4c85d53e584ffa2e277ee23f036e9f28fc1354ca5668ad93783576c2a400190cbfa38bcb0567a724c3f44ef2c906f04613bf82983973992ec8b", 0x88, 0x1}, {&(0x7f0000000300)="d3d3e1b25995fd26cb0a0ba64ada94b9dc0dfc187d6c75fffcb9e7a49a081e2a94aa033b2d8d510b5be7af87db90bcdd251703fdc8af2475c402fb1cbe0297178f93185ff24aa40bf482c90546ec823c2fc77e28b88a384f0a71466d7b3216bbb9465afd4cc74f2f27676c15ffcafc84a5752a6a02d3b12d22b36498dc519daf5a7dd8ce0bbb60db6828709c0912f93aa66ef98caaeb7d60670a6c25739aa85dde8243ae8e940e26c2365422a6073133366805", 0xb3, 0x80}, {&(0x7f0000000240)="2e57b3515adc5a4c308d7badedaf5850e9748d9c998e1f028948d8e89a1208f9251c804a31df", 0x26, 0x9}, {&(0x7f0000000280)="3cb025ea9c93a6c9dd", 0x9, 0xffffffffffffe333}, {&(0x7f00000003c0)="6d4beff7293b762fd58a09bb457268d1de7aafd62f9d4c04d47aea8ff3c1cabfecb3a7712a271e3c50f30a6ab70b204625af9cf44554228bc255d66318435827ca0c4ca471d419ea6c0463f58ff2a746cd9c5c940156f3e7ec802e03068ef5cd30fe76464736a785cece3ed3d33112b40c24992d23fa1b78c0f228ae996aed7e5736", 0x82, 0x40}, {&(0x7f0000000480)="15a8b76df74a43c0c58ef3076db6384d9b6e1c705eaa7f399a60d0ffc2d3850472d03bf895e463a79750d394ed3b88f37fab3a64585a06048dd34dc3648b665374e9f3f0b74eb1689919db573cdb3b42dcd1e55fb06ad33ad17ad6611232154e5a95c56a3cdf42eef0cd4cd4e1f7f0a91cbd61c6a8ba0365b22af457d7f9729c1b30967e4e0a58c3ff3ca8c68cfd8d561b191a16312f326034d6d180c3f3f86a2179e6518bf539590efc035ea193bd1e4a6c48d61b7fe15ff36fb8a061d0b28166d21da59320f490e3de03c1a449a631de5e1c5127f9a1703e475aec", 0xdc, 0x7}, {&(0x7f0000000580)="6989860d0c735fc4a31d85ca8826776d3931dea1cf9c6950876c831cd9d73675faa95c7d4dd75bbea4a7155df4d83167b9040fdad6d824803dac78abba16a1b408f39bda47b8c2195a3712ddf64ae04b", 0x50, 0x10001}], 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d3078666666666666666666666666666666662c636f6e746578743d756e636f6e66696e65645f752c7569643d7a494553131384bc246a22605e0b11a52154484c23848adb0c95fbc5278e0ada9a27d3b59ffd", @ANYRESDEC=r2, @ANYBLOB=',smackfshat=usercpuset,\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f0000000740)='./file0\x00', r0, &(0x7f0000000780)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 12:33:43 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 281.315163] overlayfs: failed to resolve './file0': -2 [ 281.322337] FAT-fs (loop2): unable to read boot sector (logical sector size = 1024) [ 281.387423] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.415400] XFS (loop5): Invalid superblock magic number [ 281.513508] FAT-fs (loop2): unable to read boot sector (logical sector size = 1024) 12:33:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 281.569925] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.585868] overlayfs: failed to resolve './file0': -2 12:33:43 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8ac) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000140)=ANY=[@ANYRES32], &(0x7f0000004600)=""/202, 0x4, 0xca, 0x8}, 0x20) 12:33:44 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="db6a3a302b43abd2126fac59cc17f4df53156c3064dca707fdfd2a304aed5d6acf71f1597578491e26e6a593a9c72fdce0bc18e3afa008441f382eb255881f613ec08815a571af93acb36df2bc87b800b904bef93ce931f1dc8f3719132dc2bbaa33f3e1028e0b3b210d69cccf7f62651ca10ec916e3d9d3f0fe7f7cdb69fb02aa87c6dd154faa2a6a15687152ed1d82aa75dfbfb8a436bc1d5186332ff6d39fb51d155048c8ef79e5acec2ef6deb218eed3b6883a8bd39bf8dee5bc97d493c80b4eb26bec7aa00477ed118be1a78b2c6c4abc1f60d2ec936dfa5fd27b6cced409da85e16d9249ee930909e20ff4d2284ab181e40453", 0xf6}, {&(0x7f0000000280)="331a0969715762cf35bc379f122475229c6ef85af8118ff483e06b28207b5c0448330468ee759e56a11230fb1b7931164fb8593beaff65dabdbaec24523b0557b3676e77b3280984d7afad0ae24e8ae007f507a945854e96ca7eebfa6ae7e3", 0x5f}], 0x2, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x3}}}], 0x20}, 0x81) sendto$inet(r4, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0xffffffff, 0x4) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}]}) [ 281.858222] XFS (loop5): Invalid superblock magic number [ 281.898843] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only 12:33:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:44 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008008}, 0x20000008) 12:33:44 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4003, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x0, 0x318, 0x0, 0x198, 0x318, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x5, &(0x7f0000000040), {[{{@ip={@local, @multicast1, 0xffffff00, 0xff, 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0x160, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4=@loopback, [0xff000000, 0xffffff00, 0x0, 0xffffff00], @ipv6=@loopback, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffff00, 0x0, 0xff], 0x2, 0xfff, 0x2c, 0x4e21, 0x4e22, 0x4e20, 0x4e21, 0x20, 0x2001}, 0x40, 0x1b50, 0x4e21, 0x4e23, 0x4e20, 0x4e24}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x10, "e9fd"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @empty, @multicast2, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0xff000000, 'bond0\x00', 'gre0\x00', {}, {}, 0x2, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @local, @empty, @gre_key, @gre_key=0x5}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x1ff, 0x3], 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x12, @broadcast, @loopback, @port=0x4e23, @gre_key=0x7}}}}, {{@ip={@multicast2, @remote, 0xffffffff, 0xff, 'veth1_vlan\x00', 'caif0\x00', {0xff}, {0xff}, 0x89, 0x3, 0x12}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0xfff, @loopback, @port=0x4e21, @port=0x4e21}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000000200036118, 0x800007f, 0x0, 0x0, 0x0, 0x4, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000680)={0x6, &(0x7f0000000100)=[0x5, 0x88, 0x10000, 0x0, 0x81, 0x1]}) 12:33:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2405000000000000000000000000060015000243979f0c4d49032e6043d78a9b830000004482b90a78948ec47de77970e091cd58e3b378c3a63880e4efc28c7b96f6355a6f2e191e1c790226a7449f64478fb328d9a1237f0ac6b1aae5ee21a960cb32adb6cfb4b8ede13eace9ad10a1ee6b7f636f79ef850c318f7c77643696b3f8a78c46c0"], 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fstat(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r7, 0x0) r8 = gettid() tkill(r8, 0x1000000000016) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x16, 0x7fffffff, {r8}, {0xee01}, 0x0, 0x3f2}) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r11, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="580500000000000000080000000000000500000000000000020000000000000000000000010000000800000000000000c68500005200000003000000000000000900000000000000810000000000000028fdffffffffffff010001000000000001000000010000000104000000080000ffff00000840000000000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="01000100ff7f0000000000000600000000000000faffffffffffffff2200000008000000776c616e31706f7369785f61636c5f6163636573735b757365727d29776c616e315e0000000000000300000000000000030000000000000008000000000000005f09000000000000ee030000000900000100000000000000000200000000000004000000000000000000000000000000090000000000000000800000000000008000000003000000070000000300000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000006000000000000000500000000000000f9ffffffffffffff27000000010400005e776c616e3047504c706f7369785f61636c5f6163636573736574683073656c696e75785e5d2f000200000000000000030000000000000000000080000000000000000000000000030000000004000006000000000000000000000000000000faffffffffffffff81000000000000001f000000000000000800000000000000f107000008000000050000000000000003000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0500000001040000000000000300000000000000060000000000000005000000020000006e6f646576000000060000000000000002000000000000000100000000000000040000000000000048000000010000000100000000000000ec0a00000000000000000000000000008100000000000000010000000000000080000000000000000900000001010000ff0f00000700000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000200000000000000060000000000000001040000000000000d000000030000002d2d2a73797374656d70726f6300000006000000000000000300000000000000050000000000000001000100000000000300000097000000040000000000000011db000000000000ffffffff000000000800000000000000cc0000000000000008000000000000002600000007000000080000000000000007000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="d3030000010000800000000005000000000000000100000000000000000000003f00000003000000000000000300000000000000faffffffffffffff80000000000000000000000000000000020000000000000009000000000000004000000000000000008000000000000054750000000000009f0000000000000002000000c3dc000000040000fbffffffddbe0000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0500000006000000000000000400000000000000200000000000000008000000f7ffffff626465763a2e2e26040000000000000001000000000000000900000000000000ffffffff0000000002000000000000000000000000000000b9fbffffffffffff220d000000000000a58b000000000000ff070000000000000500000000000000c1fffffff3190000020000000700000003000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010a00000800000000000000010000000000000008000000000000000300000000000100656d31000000000000000000000000000300000000000000000000000000000042ce00000000000000000080030000000500000000000000000000000000000000000100000000000000d00c000000000000000000000800000008000000ffffff7f000000000000", @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="08000000ff07000000000000050000000000000000000000000000000f000000020000002847504c757365722b776c616e311b00"], 0x558) [ 282.162246] gfs2: fsid=_h: Trying to join cluster "lock_nolock", "_h" [ 282.169105] gfs2: fsid=_h: Now mounting FS... 12:33:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008008}, 0x20000008) [ 282.234848] selinux_nlmsg_perm: 84 callbacks suppressed [ 282.234862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10007 comm=syz-executor.2 [ 282.248129] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 282.264344] gfs2: not a GFS2 filesystem [ 282.268540] gfs2: fsid=_h: can't read superblock [ 282.290156] gfs2: fsid=_h: can't read superblock: -22 12:33:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008008}, 0x20000008) [ 282.311776] XFS (loop5): Invalid superblock magic number 12:33:44 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008008}, 0x20000008) 12:33:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 282.598668] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 282.661443] XFS (loop5): Invalid superblock magic number 12:33:45 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008008}, 0x20000008) [ 282.854256] gfs2: fsid=_h: Trying to join cluster "lock_nolock", "_h" [ 282.862406] gfs2: fsid=_h: Now mounting FS... [ 282.867611] gfs2: not a GFS2 filesystem [ 282.872739] gfs2: fsid=_h: can't read superblock [ 282.877585] gfs2: fsid=_h: can't read superblock: -22 12:33:45 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) 12:33:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:45 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4003, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x0, 0x318, 0x0, 0x198, 0x318, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x5, &(0x7f0000000040), {[{{@ip={@local, @multicast1, 0xffffff00, 0xff, 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0x160, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4=@loopback, [0xff000000, 0xffffff00, 0x0, 0xffffff00], @ipv6=@loopback, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffff00, 0x0, 0xff], 0x2, 0xfff, 0x2c, 0x4e21, 0x4e22, 0x4e20, 0x4e21, 0x20, 0x2001}, 0x40, 0x1b50, 0x4e21, 0x4e23, 0x4e20, 0x4e24}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x10, "e9fd"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @empty, @multicast2, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0xff000000, 'bond0\x00', 'gre0\x00', {}, {}, 0x2, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @local, @empty, @gre_key, @gre_key=0x5}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x1ff, 0x3], 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x12, @broadcast, @loopback, @port=0x4e23, @gre_key=0x7}}}}, {{@ip={@multicast2, @remote, 0xffffffff, 0xff, 'veth1_vlan\x00', 'caif0\x00', {0xff}, {0xff}, 0x89, 0x3, 0x12}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0xfff, @loopback, @port=0x4e21, @port=0x4e21}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000000200036118, 0x800007f, 0x0, 0x0, 0x0, 0x4, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000680)={0x6, &(0x7f0000000100)=[0x5, 0x88, 0x10000, 0x0, 0x81, 0x1]}) [ 283.098902] XFS (loop5): Invalid superblock magic number 12:33:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x50d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008a}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x27, "0020010000000000080044944eeba71a4976e252922cb12e2aba000005012e0b383600b8a3bf20301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66f9792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000002ad326d3a09ffc2c65400"}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0xffffffffffffffbe, 0x48, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) pipe2$9p(0x0, 0x0) socket$kcm(0x2, 0x0, 0x73) 12:33:47 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) 12:33:47 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1c1682, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x305280, 0x0) read$alg(r1, &(0x7f0000000180)=""/181, 0xb5) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="163d4bbeefa58975fc8e6df9a92865a3f8cc20d2cb4128077613c54cf7da911ac6af1f4d06806cc0cb2e4b4c488a94dd1e2d078678783787a4823c6115018250", 0x40}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000000)=0x54b35b8) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) 12:33:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) flock(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bca274769e620a2734fa0095e0612687ecb86a548802a900030000000010004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}) 12:33:47 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 285.316978] EXT4-fs (loop0): Invalid journal IO priority (must be 0-7) 12:33:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000080)=@null) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x2}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@empty, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) 12:33:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) [ 285.395004] XFS (loop5): Invalid superblock magic number 12:33:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0xa2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000940), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000280)={0x54, 0x3ff, 0x1f, {0x6, 0x400}, {0x8, 0x1}, @rumble={0x0, 0x6}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffa}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008184}, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffff1f) 12:33:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:47 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:47 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYPTR64, @ANYBLOB="67cb43", @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRESHEX=r3, @ANYRES64, @ANYBLOB="9b46b7ab5e045a32be53cc9078ec465273d82fe5661de590d43899438500e860fc97283b52a84a35707cc842601b4085f2a3816aef77497eccc9ec0eb6923d7983afe0278893f95150775f971e453429deff328536bff86cd083795a44790c66424f1ac02d67232f720439bfe40948066bb87d42f1958eea3f4ad03f80bac49a2ecf3cb4d958d3c207f33ea734324f2086b5a23c76afe8c96dbc588e9de2ace66fad607671b57c5ca913af7660eebc", @ANYRES16], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=r1], @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYBLOB="7881b5ba365f56dcd8dfd00c6134b45c6762f7014e60af3c360c28b8f0e39c523b190b41bcc33a5c4f97ce33039af599d222e8e567b6ae81f51d7210dd5aec12284e9fde70906dba1702172a9f40bf84a0f14ae0e51762e38733c881fbd01b9e72aa333ac5bc9cf8be7971b3e897e3a2b55ea2d48c357af43273d130b1a36bf69f73a417a84ec9f02ca9e7d4910bc29f5b950c2cce585f9f08806e39d1adccfadb704e1bf13ea2e3e0b21d8c04dd426164b9b95b800a6f67c7f8dc5db573c8500b2afcc19e53c44758814b5a3556ac64dd8a013a78e846c347c600b5cdcf8561d367e82661ee5ad97c32c88f8df2fd35", @ANYPTR64, @ANYRESHEX, @ANYBLOB="393561739647e7488290a150f79884ecdf4ef09d09230f46bac9a34a1a5ba9c0f429d6a30617ef1ee14b8c09b1358477907e00"/63, @ANYRESDEC, @ANYRESHEX, @ANYPTR64, @ANYBLOB="6d9345ee1a74117fa785ae5d0d1e34af9064938de5cc5b4d32a49dedbb17456b84cff3fc4704688f832727fe7a150fa58bfe4001bb002491903832a8e0682c793f9926ec0e21aba9fc7c59e41a9c8f9ab3e0d233c3039f10b65fecc35449d81272a58749a2a155fb124933bcc3e3137d158bf187fab0fa7d982192d4ef2ad443ceee48b3b3797ffab712011bf82d4fcc1d2fc197ac27e76b11ac"], @ANYBLOB="78fd0119c4f693af9007c95f9f4f57afd1a9a079152a0d6a744d940003231135294585121f06a18f6ca762da49fbb357ada0d5333e3532a831389bc15c211ba6015f66623e592f77d2db84c788d2ee37485cd9bad14afabe71fa308b714a594529777e6b77d914c967cc1bf8e77050e62d034b0598614794f5be649132800146dee87bbb7901e7f921da2694c7ff1cc36274ab614f4fad1134dade30038f26505eae9f2c7fc3f289b2fa8aa8b599afa980b29b6dd3edb0f9c94bcff1f264b92c1ece9d582293221a5d6a195e79b5"]], 0x8) r5 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdn\x00=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,k']) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_1\x00', 0x10) 12:33:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140), 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x80, 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340)={0x2, 0x0, [{0x5000, 0x59, &(0x7f00000002c0)=""/89}, {0xd000, 0x21, &(0x7f0000000180)=""/33}]}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="745261ea86a6da642c7266646e6f3d7d446ed37b7b161b04f68afb1b042cb6b57d1fe14a0a9a57088ac39476aca6f3c4821f4a5307aa0ad39ddfedd39762dadaebd1ec5b6ebb5fd2d13e8e0dd82556f4337e5bd869e8ad84bafde6f5393c7a25375eb823937ad4f4503a4e42c21cae51c41bd6deae07b6f54749b07ea650f923c25258d5292e5e04ae4521960f7c7898afee1b5c7f1fb73b3c5152a6cbc67c8e5c56109e756057b6f3a23bf47f2ee32c9bdd0cfa139ff995acee20b6bb9f2e088e55af9eaa897ba71b77d8ffcac042507d047e6cf435c712ba6467", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 12:33:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 285.837320] 9pnet: Insufficient options for proto=fd [ 285.845622] XFS (loop5): Invalid superblock magic number 12:33:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 286.031139] audit: type=1800 audit(1584621228.107:88): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16594 res=0 12:33:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020700090200000000ddff003f06ddef6875a84fc1f277f1c0a498fa81ba31addab086649a192aedb5b8e8e2aafc5352cd7760748cf3b898d8b9340f44"], 0x10}}, 0x0) 12:33:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 286.084745] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only 12:33:48 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:48 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 286.286612] XFS (loop5): Invalid superblock magic number [ 286.334126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=10157 comm=syz-executor.2 12:33:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:48 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:48 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsync(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x3a7) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0xfffffffb, 0xff, 0xcd7, 0x1f, 0xffffae57, 0x10000, 0x7, 0xffff, 0x0, 0x3, 0x7, 0x2, 0xef, 0x1, 0x8, 0x4, 0xc70, 0x9, 0x1ff, 0x80000000, 0x4, 0x7, 0x1, 0x3, 0xb67, 0x4, 0x9, 0xfffffd93, 0x20, 0x4, 0x3, 0xfffffb28]}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) dup(r0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = dup(0xffffffffffffffff) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) write$P9_RGETATTR(r4, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x0, {0x4}, 0xc3}}, 0xa0) 12:33:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) 12:33:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:48 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsync(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x3a7) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0xfffffffb, 0xff, 0xcd7, 0x1f, 0xffffae57, 0x10000, 0x7, 0xffff, 0x0, 0x3, 0x7, 0x2, 0xef, 0x1, 0x8, 0x4, 0xc70, 0x9, 0x1ff, 0x80000000, 0x4, 0x7, 0x1, 0x3, 0xb67, 0x4, 0x9, 0xfffffd93, 0x20, 0x4, 0x3, 0xfffffb28]}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) dup(r0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = dup(0xffffffffffffffff) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) write$P9_RGETATTR(r4, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x0, {0x4}, 0xc3}}, 0xa0) [ 286.677709] XFS (loop5): Invalid superblock magic number [ 286.830825] bridge1: port 1(dummy0) entered blocking state [ 286.846644] bridge1: port 1(dummy0) entered disabled state [ 287.100539] bridge1: port 1(dummy0) entered blocking state [ 287.107021] bridge1: port 1(dummy0) entered disabled state 12:33:49 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:49 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:49 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)=@ethernet={0x306, @random="747ef33ecd7a"}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="f96b3428ff7633fe380979e6663ac16f11267a9b7f8f5470d37a91df6cc7f68b212186e05002a584fffdc363e83835dfbb90bdbf76625b8213bd87693862c0e087c6c47e229ded30f23ef5e4d9e3184883cf23fad6b19c9b9b29c33eb62027abc7fd301a984370965efe690ee8a39226a842337ef6876ebde0ea84a93d4e3e84e77d", 0x82}, {&(0x7f0000000180)="7f8ec9999c5d038e2c080a", 0xb}, {&(0x7f00000001c0)="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", 0xfa}, {&(0x7f00000002c0)="85eb724772034d845c0b0ccbc46614e827884e35aad4af3cae7e0bd8aeb219624bb07d319ae4d1604459704b137b7d17df850f216703cdc016eed289802e9b6f4202d1aae00be19750690ac5bbba81a9433201c665bbe086ae8be5e132adc939d75e2dbd4563b5863f1ba007ab59ed7895f87863232f2531298c8a3d293345560b8cb895d521ee3dbca0577b3198abad61693ee13d6a23663088477f0cd8f41e99d043c898c8dfd47f27b905a82469b09006d5bf4bd9391f", 0xb8}], 0x4, &(0x7f00000003c0)=[{0x110, 0x105, 0x8, "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"}, {0x68, 0x8, 0x6, "b13f203db684acf49a7848ddc5d842827dc040e793ae4516d16a59dfad2e58bf1a7837ec09484b8cbd748378333198e8de48bac4f57a5915337a6cfb77dd1c76f02228d42797e02f121ac90d1edf4a76a35c9c68af"}, {0x68, 0x118, 0x6, "5f3e6726d806d2b1b7b429af319ca039b837fce7e4d7ff407e11e52747cd16cf0a11005a3cdbe672bbb74b64b4f8c67c72e33b77386f5fb286df77f332864078310006aced316a738499bec54b9aeee75fe6"}, {0x70, 0x109, 0x4, "d5d8588a745b9863f3cc55b884cbb12dced85730616a1a5f476eb211a3457f86857d82c23074c44a4091e25677073fcf8a32b852203b3cda71c3456e2d9db78651be9fd689fb06e0c26a85d57474f9ae90dfed659a88f6962cca6f"}], 0x250}}, {{&(0x7f0000000640)=@sco={0x1f, @none}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000006c0)="1a286da251d1908381f5d08a67f5ad65980f97d0bd4c10e4559c4902a0ec36410d48f94acaca39a4ee6c99a73dc85effbc770ac2682c02dd6816b24c60298261a3756d0a509b44921c48fe1da028688d900630977b116ca63fb33e9284cd47c8a937221af1aeee08d7915541d8ceb62ae0a9ce9f9350ea33cfeb00b02fad1ac00d9827f682d9f397e613b6b6847626270eaf9d6438b3905bca09092bbd57b0e03543fb5d641c6d0e5f5f79ba8341b0791afebebc06d05b615a8c5ed869716708201d9d4bb3838f3b121af9ba32e91cb3f53a6c667e6ba86500a45bb298e2ec55bad9dcb4d97c45e6282e366f901f7ff1d50f4d2659864dbae12ce33438c129e4898e6377928ca9b8704b9d2e02f4d7961517874e32631eefcc5d9ba4fc56831f073274af82a48612e4674048d17e8e50a93ab907bc1b100d2156bffccfad1d103fdcb5c14714219c55b0f37824a3abff21e45d00b895b115fc7627ac4bf9e88306c7f339dfc79e2a1bc32c71c41db5261063fc17944ac42183448dcd1ff445a74d097df6367380fd4e98f91f8f7923be1caa00d6583503636c20c07618d7d6658f3587a436e96b4484793ba6cbf710e8dd1c28d25ca59b7ff387a746d0534bc279743a9aa3798c12adbf40579ee5e44b4498560cab650a6fb2064c80faab1b1cbaa1279dd1f2ef4223c6f0f5a18042d270b7c22d0b73d02a2f84040ec81b94db8938031a7c120b196b0efabc8b692393fee8d5d22aa32fef37f6d11ab0c4254c5a5f57183189db262f9ce7cd5c4f76bf5ce1a338f4f0d224c96bb8fee8a8088a578afd248d92908407d0e79ee93447a607d5097f30619637260bb672957817c6278f87aed24818320bcd018fa1f95e81929d97b086efacf3c764c5cc5efb5fc36f0aaec7e2ceefb38d1cebcb957ef4011e58cbe6233951e81300e45a4811dac73489b450719cc820ab6a3e619f8164666cbfcc03b6a390abf8c30cc07313bfb91fff3619814aad721149c87f15877d2c6c4813cdeb8ead5bfead6f7005b8a6f2e36b8fd9e69efdf08368bcd1f621d329cb57055f51624dba4c2df1ae4d516077166b14274a79812f89a93f874f7994afd948f50aead77465a5cae6632df27143b19b348955badf420a31b00404cd781a87c6c6d684daefdcca8a4e80b049a4319838957cb43ad7fa5300da491e6899dd9aa5b056abdb4c71b1ea041f5f1218d1346a4d9b0cda190683c339b8666d0e2dddaedeba12f038e58fa671fde6251966b3064d19550d01905a07ad974bed4b09fd29116be3f2dc11094c19bb79b28e33ded41913fb44d5a799077908fdf410fcac918a6ce622b2c497d3178a5a88046a2d5ff9abca54ceac6e2434d0dd293ad01d1c17cb64456b30b79f16e8745a2ecb35ea3e4a416b8bfcf4f8ccffe92876c29ce441e80ee9016a1143dfd5a8cc87635f53fc3c49bca7d23487d3bda55d393d933e3d71cce5f875b731ef10da9b3b0e2314e3988377e92124e6228549123eb5dc07a8dfef5f29914857b1abb01fe932bbae6498c9741c12a2ba80ef00f21b14e95a66a1f08565067f570ea264b34323169dbf2d68b6f4b880aba7908883a616ba0a3c783f3bc950fd54deea7d8cba688c35c61044ed1667817774ce4c5ce47547563f420a2731cbfb1306953f5377a393fa4d9ffd7376e3e1f0eb02efc1599509e7534a74917bfcb24f7a0e8015bb388c333f5cb5ff55bd929863b884b8099708c40f809b7648951134f193cb3cecaadacce3f99954f9f94da36aac66685c4d2301d0628392549efdd8521511c4efab4c5135b384d70aadd550a47f560d33f3232b56b3dfda679f95404747d16417593dca58bfbb7a570abe80b0059758c7a75637e2cf2630d3e8ce9457273eef0421216ce08e7eec50acfa0528a8cc8349b58ac10eb5fa162e69409469cd41616a327ffe81b01a72b5eeafbedf5e1cf9621d6b0ba7aa04dc1b9a83670fd583f9c757b2ef9392321e7ed382ad58e3b7f5a6412f530b4bea33cae1f2d0f82517f08e7caeddd3f37ce12284cbd65c24fdd83111484451f87a4ae428cee60f4b1507928dff57835f248d98ffc0ec08e17c8f4298e66aed524dede4e564039549de9d1ebd9e55de648d9c07a39cbecb3d811745ead3ec37c6eb75650346665ee35ef49c3b213d14cba65939eea676e1500a22c19c3cd6be1bd5379ba181ecdaff075b7860521cd72107ad86d6c4c91125710c3435755495bc0427aa0fa9d5682460c624fc919582233ab22cc7e09b934150b5b2a1066254ef78805662f0d9dad17553e7a80887fd5872a1e863f113510e2a7b9ffe70bd6f4e9613e76c1f9fceb9fa570786314fa42b22eefe4081a6ec59e7c1afa35f5bcf82f25bb0c72a34580802a12762f094ebd4bf07456c9c72bff918330477d7157ec379e2e8a2dcda79c1d841fb47af0871baae6e0265d4757698cebc1e4d973ccfc39bedde95539ed7856d36f8cfcdad7a31406455655cd9d2e1a6c3136613dd98e88cbe6702b6a3530b90f8bbd9e5208b3539625947f332694da4b789a6237588885d2256ec3d20846266c55a4dcf7c33731b2bf52e39e5a55eb811f28125629d72985043970ab65ddd625db60f01584e2f10fe20f8b21481ce8dbd1348fd62f706b68e5129a032b0a4054060fff23b16d9c6822d2bb2955831dea8460ad45e3add32da407da4385b237341d4ddc8c97c2bc8ee1ea6ecd0a56612c1ff5ebe131ecb5cf5d6ccd4d8cd2a49ebe2d10f3fe94d6e4208aacc53dc258c4c57b223fe49e5ebee708500053f015a8265847559c699352ed19760bb3895ba3a5e675357b37597ca0886cce34af9929513d13c2ace01e219c16043ac828f7a14772722d9f865640a45473655feead23540c243e7d115caae4332d913c851e4c20a041d3619067f1e8a272d037d7f55374589fda7d5ac16f62116d9460101f2a85d40b7bdce8061ff105932cf2f83fcd7ce90d704c72a0e9ff3e055d6f3def5a84789fc391f3aa57601675f10f8e0c229f83585122e9e60f07cf7a08282bac7c7dc9cd6b057ec106224af178c94608c56099926ab80428bb9b00547b55ecc2fa8774a315e86815273fdc87b55f5062c36be91f44037597d89bdb66867191ddffb8ce933632f62cdc5a5f984a724527873f45f392156bc86d451619952146a7dfa80d641e5a75cad1d9bf1372f7532ecc2c090b7f782d563950a892cb93d31ba4139732c0bacc15d92e0eb959bb48531a27667bb0eadb76daa76e2b9f64e161dd6ad17d7c2aa4af7b2511f0c52d4a092e009ba0c8ff1c77482845f9ca39b4c3c7384dcc5cc6a7099f48c74b5b0cb6f37ea782aed32ef0ee4b6656d3304b1d646103de16d6fed53e976a2aa83a9e184d7b0812daa886f599dfebdf499c95e9d984ccf1cab0d9a8bc0b6dcba1824e5e97f2114ab180924721706915d94bceb4c717fd72efbc41d1892ce50bbbba593c029e6b878a3808e977f736bafdcfd2382c3407ebbf3ec47ede8ceb35de9180c1f5d3ffa7f24493df6e5fbf0578fddd902fbbf7dc8be73fe8996c751f59af47687ac52d7499fbe106f4acbc488c1dd9587f4ec217fa4d6c3dfca3a62de62f9e4861d9d1249b216591b04663dad3e71c141d188549a6605f399a5de3077e8f9f7a999835b22719e5be079c84ab1da45e78edbf1475c11c00588927d095042e69c2de24f45c10794cd4c8a5b55cf20373f4683af129b03e69853182afe9bc231ee830b86d281c83e84b7022ca97cbd4bfbc546e2b59f63c38eef772825eaf81649b3d4ddd5cdc380bab082e1ccb5011a26d791dd62cc68e78a85722760c32dc440e8243f0fae33c2ef2cb886aea691af848868716fb4b2c2ba330d80dacbc0d5dde6acbc7604ce228aa7dd65c653e06cd3d3e639dcd1307c364d5909aa08e4233d66590459a4743eb5894246cc99abf9c1a630239c09a8264062e3489340ddb7e3c2beb27d15bfdb2f406887f0ca467c17c482aa8646ade27826e0a95fc15463c43ab5c6e78dbbbdc27a6df740c9cafc6374a31a5a9d0819fa09fe14b982e15078d4519c81ff549495691e9c07350a8018576f1bc271ccb4552bdf6b47ea6bd5bc70e9fa17cea9b19e05fe8f0db79111480c5ab89ea94373897b69534cb6ce92eb8da5509cc12e558b0271fb87c18e9463852759ba9b992ef054a50e568265cd895dc10a0850fe57f56f3cd79593c8de9a86f861217d1e2016d8a35b30315073345b39e99e1a3d211b5731ca7573951e7276327cd8211268ad4b5dba20df78c55553f5fbe5f4da54ee4d53ea673fc5cf70afe531335469925747579301883f3eb9eb8ce89b3f8936bdbfd64ef7703d003aa6023d6e710207c9170f1be5dae3529b75047d29ab90ead95d22d100ee9e2e65bff9328fa600b9475841bfecdbbe41840fc67b63f95b188945d5c29c7b5f76d76cc0721b25d5177360a3817b692fee0635f48265758726cf59911c18855c2c168ef83e957dd49d4a43e32e07f5b189bbe28fb5db0f479f540243b40527fcb621c67eedacad8134de1d807b4ccaa82ac245d56d1ac12f677a7baffade77b9a5130d0dd4a60c3696ab0e9a3a7357c4b762a50dcae3eabca2d718054dd7ee7d4b397a3eee8902ddcb10938056b56e8aded2475408499ca2cd19302c2a6f21f99e9ce73057c74edc65d96075b3ae940305b894eef5e0661758bf10cd063a9338c3c7225dfc9c4d024469ca40b01ab8451be6e66279423c938daea77cd66fc646b72682afe04e5927c6373266cddae412dc94bec452d703e5b643899f0e5897d480e7b43263840b1f9b7b6c8d690279324239961f3e88db010457dce7944bc1e547b288e07ac91258004cb002f0de6de82067cb54e0cb503b9618b83b23f8d2f214fd5ffce952e32942a85316fd36e677758a726200ed0042179dfcba87b0574ac182316198dee77585925ae6f6e5494c7616fd0824a24fbdd49caa9ea7f204690dc3bc5eab74265d451d416c5104a58169d9dfcadab0b85868ce818f07184302ee64faa00ea3e3ca9321be3e83acd5ee83fc5ef139a7c6a6d2d416380a4776729d8cb0f60f73fe872d30636bfe388a066c1f000cfc17da6e1e9c9a95b624afd7b89119633b9a55a541d80c619cb5e78b9c0a1c7d94d528ad16148b1ccd0c9fb4838b79f0f8a740963cfd9b1da19797d58d6b749ccea20d42dd5b51bb85d940796ce83bd38daf8be2ca1c67f8cd6e2f1481bcb706092659fc315e6f8203df7c9b4ee060fee387cc0a82ef5a7727feb7137624c4da60e3aefbb2877e15b378955d4fe14be57e26c217b677407d35f1e04551f776b4c60e660d45df2476ff7c417663040f3b9da276ed08187fd8a69ca38d24ef537239bbbcc6b24861f57179005ba23057cd778832ec36864efddcd1c16ec5333967bbcfd24a450ed0b91dfa667b029109329845de5d52e16e50ab610c2dd443997bd9f92fa05e4636b042edb5d640e65dee95fff4a57eb21cf14a25ae8eaaffe621add73d22be710537d0beaf8528833b7344e3b18d8776893fca6210a56c187a6fd05fbe98554ccba15734cf5b9cafc871391ca551aba79c01d53d1f5b60534bb516ca42189071993e6793b5e63b036c9754634d203463c53c5ce8f2592f0da5b3d6e76c834d0c8e68d0bfd237fa2b57275e6c034a771e15e7182cabd796e5018a6d5927c76f925fd5c9f7d628f8dad7f17dd966675af6e215556d6562dd2f58ef07edde0d05c153a3d1788fb88b83ec3dc41de4fe6f055e5f2c58f075e6159358ba78ca", 0x1000}], 0x1}}, {{&(0x7f0000001700)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)="95d146a24558dd9ff5c79e6746dc9100992ed4e703b3f9fc7f1642b0cb19f091a145ef005775bea0b287b4e86e1eaf1fb1379f4d575d740041230a8e289df2a4a0f4c490a1d0437db088e4a6ac33818675741b0b8983629daf938641d4ad321d0f8ae2cee6ecc9b8b8cad9e13b3c7a9dbbc488138ac3ed463c53268415d7ed79b6864f6b6f84f19dd235f34e1f51f05781006c7d116334c0809248fc9c75e5a9fd9d5b177da980e8293000689460a26fc725ca6caee0a5c8d99ac058a617c0d2b98e39f83bf2e3d78a2c43f80b58e4afe0e117d7d598c5c978e5f4d209b4433e2d3c77d4f860fc5f387ba2888b05dd4f5d4c20731997", 0xf6}, {&(0x7f0000001880)="11d7c1b53f5732fa117e7d8f80c0cab175c78e796d7a67ab5cdfad", 0x1b}, {&(0x7f00000018c0)="0216f544e0ddaae1a03b36d04bd50bcc79d525b3e63def094403db01abc60abd1f962401b443114f07ec28bfd13a8de3c3fd1ef5cbfded", 0x37}, {&(0x7f0000001900)="5bc497dbe6de1437cd824a21", 0xc}, {&(0x7f0000001940)="b90db9f968db64d1ee5af5926ea9f1cb98e884116f4432ff68fab88fb77c22d78c51c37cb909750a378778d513bfd7d39b635e8d8d2ef5f6d4a3f4a3d347d42ccbc6e41e0a98dabe004bf558a1098d5f18cefc1aafd2f64c8a8065cfc331106be001416fbe598842caafd8e0b4076a0b87cf597c11cc637c15f1c0f8de465c5047344465f80afc8a05d4", 0x8a}], 0x5}}], 0x3, 0xf31706a800) 12:33:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) 12:33:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d9165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) 12:33:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:49 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x7fff, 0xffffffff, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001640)=""/4093, 0xffd}], 0x1, 0x0) 12:33:49 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d8165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 287.492754] bridge1: port 1(dummy0) entered blocking state [ 287.498762] bridge1: port 1(dummy0) entered disabled state [ 287.547775] XFS (loop5): Invalid superblock magic number 12:33:49 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 287.746858] bridge2: port 1(dummy0) entered blocking state [ 287.753145] bridge2: port 1(dummy0) entered disabled state [ 287.773731] device dummy0 entered promiscuous mode 12:33:49 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x1005}, 0x4) fcntl$setpipe(r1, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f00000000c0)={0x8, 0x4, 0x4b, 0x9, 0x0, "c73afae5f29d83ba02e9c98a34de4bd3fbbedd", 0x2, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000000)=0x10001) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30009, 0x0) [ 287.795617] device dummy0 left promiscuous mode [ 287.800918] bridge2: port 1(dummy0) entered disabled state 12:33:49 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:50 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x8ac) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x8ac) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000080)=0x8ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r6, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYRESHEX=r2, @ANYRES16, @ANYBLOB="2857b219e764656b58f083f3e198675640c642e4fd9edcef01", @ANYRESHEX, @ANYRESOCT, @ANYPTR64], @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESHEX, @ANYRES64=r10, @ANYRES16, @ANYRESHEX], @ANYPTR]], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 287.920825] XFS (loop5): Invalid superblock magic number 12:33:50 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:50 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d8165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 12:33:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:50 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:50 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000340)={0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c000200050007000500000011d8165fe35cf75e5adcafc537684466a96e0a317fc47ff9ed949d8a82743f4012689ebb70da8c5a"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 288.028618] UBIFS error (pid: 10341): cannot open "", error -22 [ 288.214223] UBIFS error (pid: 10341): cannot open "", error -22 [ 288.230168] XFS (loop5): Invalid superblock magic number 12:33:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 288.313977] bridge2: port 1(dummy0) entered blocking state [ 288.320978] bridge2: port 1(dummy0) entered disabled state [ 288.338226] device dummy0 entered promiscuous mode 12:33:50 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 288.394316] device dummy0 left promiscuous mode [ 288.399506] bridge2: port 1(dummy0) entered disabled state 12:33:50 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setfsuid(0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 288.593385] bridge1: port 1(dummy0) entered blocking state [ 288.599273] bridge1: port 1(dummy0) entered disabled state [ 288.688426] XFS (loop5): Invalid superblock magic number 12:33:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x8ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYRES64=r6, @ANYRES64=r8, @ANYBLOB="9ef5b6973970891da2c909e27f406a0cb068f21df5d36bb8842f565abc01410ffae8c20e8abe19552cc8da77111690f753a0e702b6856d76bda6c23d16e0f0ea1f09125ee1e89150f2042569715ab4a6fb87e00b0a6f6ef3877c85d5fdfa76c0c2d3d4348f8ea2ff32be4b69dede43e50064ac8b763f06180fbf5723f92c8512ae13a181e87487b6ab7dbffa68d8f3c521d1152b9dc96d5edcbe976688df5267256714fcf38b21779334700b5c4e5ec860faa36acf8205fac1d12844d55c822a65204e31fe9948401a", @ANYRESOCT, @ANYRESHEX=r10, @ANYRES32=0x0]], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x3}}]}}]}, 0x64}}, 0x0) 12:33:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) flistxattr(r0, &(0x7f0000000140)=""/195, 0xc3) syz_read_part_table(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="020181ffffff00090000ff07000080ffffff81ffffff0000000001000001000100ff81000004800000000a0000000005000042000000000000000000000055aa", 0x40, 0x1c0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:33:50 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:50 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setfsuid(0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000080)="7c3148a4b37bfc4313d23d7fe60c02021260d7ca8c05c98ce514dcf3448aed58c428cd40d8a7c1e3d352f1d5a0837767defe543e994d136bbf4a6ba6c5190e655e6fda04d1cdc1a8e187ede3860beadf35105e3eaa74322d2a64a15a7708fe1228f11a38172df4b3dfb881ea9df056a1e731206e8151ce384d16971202b0bfc478fb5c216326a4385ff32171f4f8911a0cb14348b4583a28c3ca6d19f0921b692646fc01107eeb735ff6ccb1a079ab28c8149f235c6372d159d579f0aaac769111c4017b775cba9d1f", 0xc9) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x102) poll(&(0x7f0000000200)=[{r2}], 0x1, 0x0) [ 288.922413] ldm_validate_privheads(): Disk read failed. 12:33:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffffffffffc2) 12:33:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x402542, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = dup(r0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6tnl0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100000000000000000000100000000000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x0) [ 288.972502] loop0: p1 p2 p3 [ 288.972502] p2: [ 289.007882] loop0: partition table partially beyond EOD, truncated 12:33:51 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setfsuid(0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 289.034849] loop0: p1 start 2304 is beyond EOD, truncated [ 289.059226] XFS (loop5): Invalid superblock magic number [ 289.062151] loop0: p2 size 16777217 extends beyond EOD, truncated 12:33:51 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 289.144760] loop0: p3 start 128 is beyond EOD, truncated [ 289.167161] loop0: p5 start 2304 is beyond EOD, truncated 12:33:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 289.195560] loop0: p6 size 16777217 extends beyond EOD, truncated [ 289.256899] IPVS: ftp: loaded support on port[0] = 21 12:33:51 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 289.294273] loop0: p7 start 128 is beyond EOD, truncated 12:33:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000000)={0x7f, 0x100, 0x9, 0x1, 0x46f}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60ffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 289.502036] XFS (loop5): Invalid superblock magic number 12:33:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:51 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:51 executing program 4: perf_event_open(&(0x7f0000001780)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x92, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x44000) 12:33:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 290.046233] XFS (loop5): Invalid superblock magic number [ 290.061548] IPVS: ftp: loaded support on port[0] = 21 12:33:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x402542, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = dup(r0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'ip6tnl0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100000000000000000000100000000000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 12:33:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008a}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) pipe2$9p(0x0, 0x0) socket$kcm(0x2, 0x0, 0x73) 12:33:52 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x200000003}, 0x0, 0x0, 0x0, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus/file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6075732c776f72b0f522c21bcc171a696c75312e75707065726469723d2e2f66696c6530"]) lgetxattr(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00', &(0x7f0000000480)=""/207, 0xcf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) dup2(r1, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() getpid() link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 12:33:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:52 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:52 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setfsuid(0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 290.603877] overlayfs: unrecognized mount option "wor°õ"ÂÌilu1.upperdir=./file0" or missing value 12:33:52 executing program 0: r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e001a000a000000aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 290.650179] overlayfs: unrecognized mount option "wor°õ"ÂÌilu1.upperdir=./file0" or missing value [ 290.685355] IPVS: ftp: loaded support on port[0] = 21 12:33:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f0000000440)=0x0) io_destroy(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0xff00, 0x0, 0x0, 0x0, 0x30d}, 0x9c) [ 290.721700] XFS (loop5): Invalid superblock magic number 12:33:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 291.128616] XFS (loop5): Invalid superblock magic number 12:33:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'team_slave_1\x00', {0x2, 0x4e24, @multicast1}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000}) ioctl$KVM_NMI(r2, 0xae9a) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x5a]}, 0x8, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x300}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xff, 0xc8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:33:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="584653420000100000000000000010000000000000000000000000fffffffb00984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}, {&(0x7f0000000200)="f7", 0x1, 0xcd}], 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = gettid() tkill(r1, 0x1000000000016) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r1) 12:33:53 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setfsuid(0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:53 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x64, 0xc, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000340)=0x9) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140)="73844ae89d", 0x5}]) 12:33:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 291.476592] XFS (loop4): correcting sb_features alignment problem [ 291.501653] XFS (loop5): Invalid superblock magic number [ 291.512637] XFS (loop4): Mounting V4 Filesystem 12:33:53 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setfsuid(0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 291.524251] XFS (loop4): empty log check failed [ 291.532556] XFS (loop4): log mount/recovery failed: error -5 12:33:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 291.578081] XFS (loop4): log mount failed 12:33:53 executing program 0: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'geneve0\x00', {0xfffffab1}, 0xf800}) r1 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000400)={0x9b0000, 0x4, 0x112f, r5, 0x0, &(0x7f00000003c0)={0x9a091f, 0x3, [], @value64=0x8}}) ioctl$VFIO_SET_IOMMU(r6, 0x3b66, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r7, 0xb59a1000) keyctl$read(0xb, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) sendmmsg$alg(r9, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="7efbe03e189d89d580e11f09d614771f2272b428e404f1488a923ad9bd4fb9e05347ccfbdaa01dba4bf309c88384c2302d50fc56725462957d6363964fed00945b6a002784b8fac15b09e270b1415ee0736ba4ad40e5c600abfd788b27546745425851e051f7cdaafa52a7cd0c739c34aaac090fd913f12192d5cb2c21cbbe6876acf444058ac7399389ca21d4fe594a16f0b6ccb3d41a9becfe682bbcfb57b9b5ee711dc755269b", 0xa8}, {&(0x7f00000000c0)="27175debd008db79e3b910d4960832183ab5b5e770b754565b59df62f59d4c386bb8b848b03b42b95d04deb94f8896a3378f8a9fd424e1f2b509ffa1a56cb9800558626a692da929aa", 0x49}, {&(0x7f0000000280)="b2a44ec570dec82c811a434e4d61a43b7ce1a9fdf36153c97cab8a46a3c06d678ec3001eddfdd66f64b74cd93b5068711b75d5690819d1f1595f3b8fe6b3ecdfb8bac49240afb9c165c6ac5e7bcdeca624c376230a446294718da8441a8cdc9149a247e36e2453689fed5da5f49b440f0e9734c890a6f6880f96b263fa7ca9dddfbf6c8dc72a1f04e768f0758715d0258ae7a248edf210fc6d39702abb588b61b4cd6ee54b4cd9c8de5a9ae344dbf939cdbf2edb3544a2decb78c7e03543b0521090db4a7f423e131c957c69dbfaf257f8c3e8efbb", 0xd5}], 0x3, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x3ff}], 0x18, 0xc090}], 0x1, 0x40090) 12:33:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000040)={0x3}, 0x8, 0x0) sched_yield() msgrcv(r2, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x3, 0x0) 12:33:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 291.799948] audit: type=1400 audit(1584621233.877:89): avc: denied { map } for pid=10640 comm="syz-executor.0" path="socket:[38455]" dev="sockfs" ino=38455 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=1 12:33:53 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 291.847292] XFS (loop5): Invalid superblock magic number 12:33:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3c) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x43e) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0x1, 0xad, [0x401, 0x1b, 0x8, 0xd2, 0x4], 0x18}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x256f9d8f, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000005800), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_DESTROY(r5, &(0x7f00000000c0), 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x100, 0x0, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x400c810) 12:33:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x300, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040888, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x3, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x30) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) sendfile(r1, r5, 0x0, 0x8040fffffffd) 12:33:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = gettid() tkill(r1, 0x1000000000016) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x2, 0x4, {r1}, {r3}, 0x9, 0x200}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xfffffff800000003, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x141142, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r7}) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x92) sendfile(r6, r5, 0x0, 0xa198) 12:33:56 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:56 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 294.492058] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:33:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:56 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x244dd83c}, r1, 0xffffffffffffffff, r0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x4, 0x0, 0x1, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0xffffc000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r6, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x4e33, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0) [ 294.615540] XFS (loop5): Invalid superblock magic number 12:33:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:56 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x41) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="cefaad1bb83c000007dc", 0xa}, {0x0, 0x0, 0xffffffffffffffef}], 0x481, 0x0) 12:33:56 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:57 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0xb, 0x1, 0x7a4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000480)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d01000056ab", 0x5c, 0x1a4}]) 12:33:57 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r1, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r3, 0x5423, 0x0) write$binfmt_misc(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r4, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 294.970787] XFS (loop5): Invalid superblock magic number [ 295.207694] Dev loop2: unable to read RDB block 1 [ 295.220736] loop2: [ 295.224623] loop2: partition table partially beyond EOD, truncated [ 295.292036] Dev loop2: unable to read RDB block 1 [ 295.298679] loop2: [ 295.301640] loop2: partition table partially beyond EOD, truncated 12:33:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20031, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000440)=""/231, 0xe7}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x240104, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) getpid() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x6b, 0x2}, 0x0) socket$key(0xf, 0x3, 0x2) 12:33:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:33:59 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:33:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r1, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r3, 0x5423, 0x0) write$binfmt_misc(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r4, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000040)={0xbdd6, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) r1 = open(0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x4, 0x8, 0x1, "567cfb8edec0458b45ea4ed6e8d18b16df82ef92d879deffe0a548b840804106", 0x20323159}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x2, 0x7) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000100)="93764ae3db1da48c3c947ffcce783bbcb4b773bf9c53e4cd7f1b0888529de3d83f3f921e07fd2560e6338399076661805f96f8642391c74dea5b40cb7f2af33b17f46e8d458d6d4fc739948080a8fc92e290c6207b0647102b44a486bf48db4432", 0x61) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x5, 0xffff, 0x8001, 0x40, 0x1, 0x1, 0x2c}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x3051e) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 12:33:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r1, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r3, 0x5423, 0x0) write$binfmt_misc(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r4, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:59 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 12:33:59 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2d72645761202b696f202d637075206faf2b40cd4a4b30e5cafe5efb0172646d61202d70696473202b7069647320"], 0x27) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084502, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="5be2e6768e3586c31a2b583c8dda46ef", 0x10) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=\x00/bile0,lowerdir=./file0,workdir=./file1\\\x00']) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}], 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') preadv(r4, &(0x7f00000017c0), 0x22a, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x91d6, 0x0, 0x3, 0x20, 0x9f, 0x0, 0x1000}, 0xc) sendmsg$sock(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="c0b29f655172d7dbfc43eab2541b0b42009a8b20c49e5ac60b78b9b5e7d0ce5c01d9302c49197d415ce2d44bbd9177cf2aa046583393b2b2e3141b61084e7eb01ee7e03edc5fe11efb18be9ce3246867f9c896d8d4f22f88c68ac4cceeea567e0c81382c573e0307e4b113c64beff524c6cf7f147cad1557fc799a0f5c01b3b13adf529bb1f226791832f4e8939f6f70b28eebb7d60baed527ad8a2a3c6c2ab851004b8095011377af8195cf6912001f764a3938210d2dab42948fde09e73273c99644adb9314cdbc4a218707bbcbe0cffd9a359cbb303a490eebd6dd4", 0xdd}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000a00)="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", 0xfdd}, {&(0x7f0000000580)="acb3695ebf5a8bad568ef8b4cde0791f77ef322d6fe41e27ea8ba2e82bb73f8f8f1898ddfa48fe5f5ca736ef6fa1964e307c3bdc7f9871de38783c8495c56788e7580ff89033fa5587925bdd2a886674c6d1b45c7e0d892662057aa73f779a416eb28df30a0008bf8d671fb3d6641280c06bb305caf99eb9a095c85b67d9c62a0c9072cbb93bb1965de22add7a64bf29154125e595889c42d1f50b2c11f1f76da95f82e1e554f2e5481acaa7804445e0eef7b4d72db7d261", 0xb8}, {&(0x7f0000001a00)}, {&(0x7f0000000640)="ec09fd26b52e01a1ecb957d3457ea66b7bdb92907e15649e16e17436ad3ee9fa81168dca67a7c82126a763bebc2f424d12c0ab6ba669eb33411c409ef40c0584e8b52a8e699d2c919cd0b33f313d0057fd14f6fd", 0x54}, {&(0x7f00000006c0)="b96116d789f5214d9aba3fbc8b5f02caf2682001c94b8dc61eb160279494ae7fe0fd0b4e880b4e0efa31f8f9928b7197ccc7a581256b344a42e81ee4037cd872131a3761", 0x44}], 0x8}, 0x6000011) dup(0xffffffffffffffff) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, 0x0) [ 297.706996] XFS (loop5): Invalid superblock magic number 12:33:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:33:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 297.854184] overlayfs: missing 'lowerdir' 12:34:00 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) [ 298.002769] overlayfs: unrecognized mount option "upperdir=" or missing value 12:34:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 298.088909] overlayfs: unrecognized mount option "upperdir=" or missing value [ 298.312282] overlayfs: missing 'lowerdir' [ 298.321926] XFS (loop5): Invalid superblock magic number 12:34:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000540)='./file0/file0\x00', 0x2000, 0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000440)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000340)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10400, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x7, 0x400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)) connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 12:34:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(r0, &(0x7f0000000040)=""/79, 0x4f) connect$x25(r1, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(r3, &(0x7f0000000140)='./file0\x00', 0x400000, 0x182) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e8099f7b57b015de", @ANYRES16=r5, @ANYBLOB="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"], 0x9e8}}, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) read(0xffffffffffffffff, &(0x7f0000000300)=""/128, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 12:34:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:00 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:00 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 12:34:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:00 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000200)) creat(&(0x7f0000000280)='./bus\x00', 0xc) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 12:34:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:00 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 298.653175] overlayfs: missing 'lowerdir' [ 298.671592] overlayfs: overlapping lowerdir path [ 298.691437] overlayfs: 'file0' not a directory 12:34:00 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 298.728591] XFS (loop5): Invalid superblock magic number 12:34:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:01 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./nile1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) 12:34:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 299.014710] overlayfs: missing 'workdir' [ 299.048249] overlayfs: failed to resolve './nile1': -2 [ 299.122094] XFS (loop5): Invalid superblock magic number 12:34:01 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 12:34:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x420400, 0x52) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x8ac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f0000000100)=0x9) fchdir(r2) r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r8, 0x800fe) truncate(&(0x7f0000000040)='./bus\x00', 0xfb3) 12:34:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:01 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x4, 0x9]) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) dup2(0xffffffffffffffff, r3) semget$private(0x0, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0xff}, 0x8000000200014436, 0x7, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x9, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000080)="62f23e748cdfecc0d3bcb88248e7f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6802d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e648156acf40791aa275328ee3d49ef46da4f299c99c258c54bc51d0f8856441ef0415a03cc85c61f137ca0b5108", 0xbf, 0x1}], 0x100488, 0x0) 12:34:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 299.352568] overlayfs: missing 'workdir' [ 299.394252] overlayfs: failed to resolve './nile1': -2 12:34:01 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8ac) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './bus', [{0x20, 'procsystemem1%-vboxnet0cpuset'}, {0x20, '(vmnet1'}, {0x20, '$.6/%cpuset]\x00'}, {0x20, '/eth1'}], 0xa, "33d65e08a43bf31c45ae6feee21f62cc1663b25ceed90df8acd6b356ffdfa852283f1462a77b8fe1f224af249d84414074ed1c85fe528f3d59bbb790f20a3f3c5a3927780d73668830fe34836211e1a4e15ddf0b0948ba1f6e79a8a584dad483ae70615f0eaee71649546c9e410967cedb53200efe59b28713609b25ac3d037db0d97111c064d5ac02ad922096024b3513665b6ba533ba29ea9147c928db794d7ce08c39e748670e84abbe0f3e4d373c79da0e58e459e8e3f11050b01990fd"}, 0x102) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 12:34:01 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 299.452270] XFS (loop5): Invalid superblock magic number [ 299.454501] audit: type=1800 audit(1584621241.537:90): pid=10874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16519 res=0 12:34:01 executing program 2: r0 = socket$inet(0x10, 0x80003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) sendmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff14, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000200000a1f000003140308000800040012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) 12:34:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 299.730957] overlayfs: missing 'workdir' 12:34:01 executing program 2: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="1217e56d66be9b603a3a5d2c303a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) semget$private(0x0, 0x1, 0x551) 12:34:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = dup(r9) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r11, 0x201, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r12}}, 0x20}}, 0x0) 12:34:01 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:01 executing program 0: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000015c0)={r2, 0x0, 0x0, 0x4, &(0x7f0000001580)=[0x0, 0x0], 0x2}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001600), 0x4) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0xd3, 0x1}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:02 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 300.015285] libceph: resolve 'åmf¾›`' (ret=-3): failed [ 300.028198] libceph: resolve 'åmf¾›`' (ret=-3): failed [ 300.046542] overlayfs: missing 'lowerdir' [ 300.047026] libceph: parse_ips bad ip 'åmf¾›`::],0' [ 300.056679] libceph: parse_ips bad ip 'åmf¾›`::],0' 12:34:02 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 300.083529] IPv6: ADDRCONF(NETDEV_UP): bridge1: link is not ready 12:34:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:02 executing program 4: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1f, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) [ 300.230887] audit: type=1804 audit(1584621242.307:91): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir481949119/syzkaller.wKXQ04/57/memory.events" dev="sda1" ino=16870 res=1 12:34:02 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 300.306037] overlayfs: missing 'lowerdir' 12:34:02 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 300.366676] audit: type=1400 audit(1584621242.437:92): avc: denied { setattr } for pid=10945 comm="syz-executor.0" path="/proc/10945" dev="proc" ino=39278 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 12:34:02 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:02 executing program 4: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1f, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) [ 300.538073] overlayfs: missing 'lowerdir' 12:34:02 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 300.809179] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 300.817641] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 12:34:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:03 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x2}, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=r3, @ANYRES32=0x0], &(0x7f000095dffc)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x80802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000380)={r9}) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x10, &(0x7f00000006c0)={r5}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x8009, 0x9, 0x2, r10}, &(0x7f0000000280)=0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES32], @ANYRES32=0x0, @ANYBLOB="00000000000000006800128009000100766c616e00000000580002800600010000000000000c0001007f000000020000000c00010002000000070000000c00010000000000030000200c00010009000000fc0200000c00010000000000faffffff0800050000000000000000000000005aba1a36", @ANYRES32=r8, @ANYBLOB="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"], 0x5}}, 0x0) 12:34:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:03 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:03 executing program 4: mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x4) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:03 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:03 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x100002, 0x1000, &(0x7f000000f000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2800, 0x40100) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x80000000, 0x460c, 0x7a, 0x9, 0x0, 0x1, 0x9, 0xea, 0xff, 0x6, 0x3, 0xfd, 0xff}, {0x5bc7, 0x3f, 0x9, 0xf7, 0x79, 0x40, 0x0, 0x5, 0x8, 0x2, 0x3, 0x0, 0x2}, {0x0, 0x1, 0x6, 0x92, 0x2, 0x9, 0x7f, 0x9, 0x88, 0x1, 0x6d, 0x80, 0x6}]}) sendto$inet6(r5, &(0x7f0000000080)="b08a290de99d33ccc51e9ae3ff", 0xd, 0x40084, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @mcast2, 0x8000}, 0x1c) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x8ac) pwritev(r6, &(0x7f0000000780)=[{&(0x7f00000001c0)="9feb6a82343a83825eee04d102f96334e74c7dcfc2c78af74f9258f6102cfe4560f15d92062312e9055805200f4dceb97a44a1852cf84064592d3265e10d8b5ab41f6d382cc08153ef6bf25ae818b02c990c61", 0x53}, {&(0x7f0000000240)="91a4a30ba1ec707b5f4cf1d54c4fbfffc625cd023a649c33b2eea5a711db264851c77076d91a5187ff4c396cfd5275841ec58b0646fbcee550d51af564c1dc848128108769520c216ca8e26669486586329b6bd300ba70c1c1f0fef405d3b299f1c80550d1746a05b200631cbbcc492f3c747f5b72331748450bf9defc24d4b4ad0847f31ba18e289efbbc94bf2c4ae5ca", 0x91}, {&(0x7f0000000300)="0a95dba35ffd497bd6e6902d9f44ffe082fc823f4d8a1897ac36081b8a4292e02b479126631191bb3ec072d09dde5b271108e381789eb3f854a8b5f2360368cf689d2d7890b9d2fd1b8d0ec4504f05f6c149d85f2c44ee1f18bee706b25cd566db255960a745a1ec1b8efa8a74e785ac87aaeceba90da5dc", 0x78}, {&(0x7f0000000400)="c12263d0e80d7bc303d7c0da3410517461ab7e28dd28a5520f3e8ec85c1381b3ce0985d27f86e2d12c1ef427e6fb6d7ab1b03b5349fbdd76a6594a76787e3c12fddfa0b18c01ebf15fffdc8de684a792c899ecec3000f04435ab2ddc64f04f0e3da10771c45ad073cd24b52d7d3e2ce1ade031baf25d0eaf355c35cc201e5c1ee964978c757e54b01436a3eae41f0ba7c49c35c4da775c6d12c3f986167179abb799dcfed0f5793460908efb8b3aa3eea4d5c0bececc2a3091be79404eaa416a18997fe13f43fad3c818d2244852443f98d9fd18d8099e05a2cd704c81d9d8b31b84bca2569c9ff0b91d", 0xea}, {&(0x7f0000000500)="5c4cae01828ee4e458951e56b446300b6e50c87d0dd3d68a7d89a44f1f915923abea2a75b972f629df1da8c24938b237c61675864bb0d72dfe37f221c9b8d269e14079f43263b204e567ef5d87d214951e282efc049fa745a3e4f627d3f357d7713fcda4a183ac5379716751abf1b1da3543a658ed67ef27959c24f62451d4ee3f16975f04117d4adeab57731a5e222acfb4b0ff726b3801ed2bf3000a762b30e2fa", 0xa2}, {&(0x7f0000000380)="741ff5c88b751cbd190a542d8492da6007", 0x11}, {&(0x7f00000005c0)="e81e2f03c1ed8ce924129d809f2dd0445f7ee760f3abb65784d32b18541b3101e373769db8573c737ff61821e172fce1d12271c3d466e3749d2909c6a275226de441649f16ec226769065360839d25531ede3d44367cbfd964673944146f102ceabb826745026fcce121665c68fae792600b1deed389aecb60dd617821415ec60c95387b1c35cec5d4dac6d650a69976d7971f65b7", 0x95}, {&(0x7f0000000680)="c9462c5007c98d2a3ec896a328be302318b3a3e48a4b2ef090cf9f3578cf7f3b5c00f008726cb9cf", 0x28}, {&(0x7f00000006c0)="128525c12caaa552d7154517cce8ab6284ecade86ff2e4a1e4d690032cb0d8766842441e984a65603bc6b433de64d24d4a80eea96df5f8c040c30120e0baea", 0x3f}, {&(0x7f0000000700)="ff8efbbf4c2cc64c3809b5d91ec95cdf26dedbf761b3a4f16487a0b82ca39c8e71eae33931b35cd347793fb019cfac6ad9759891685bb0ad57f15091e55915aeb986ef1c62c63f8a7ded", 0x4a}], 0xa, 0x5c6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 301.430448] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 301.465985] overlayfs: statfs failed on './file0' 12:34:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8040, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) get_robust_list(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1410c2, 0x0) ftruncate(r3, 0x200004) shutdown(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000000c0)=0x1) socket$inet6(0xa, 0x40000080806, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 301.491650] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 12:34:03 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:03 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 301.732403] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 301.755729] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 301.756710] XFS (loop5): Invalid superblock magic number 12:34:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0x0, @rand_addr=0x6}}, 0x62) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000010800, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6ed9bca2066f7374616c655f726f"]) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x600200) setsockopt$inet6_tcp_int(r5, 0x6, 0x7, &(0x7f00000002c0)=0x8, 0x4) r6 = eventfd(0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000180)) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000001c0)={0x4, r6, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x200, 0x2}, {0xffff, 0x1f}, {0x78}, {0xbf5, 0x1}, {0x0, 0x5}, {0x2, 0x6}]}) 12:34:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:04 executing program 3 (fault-call:10 fault-nth:0): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) open(0x0, 0xc43, 0xf31272d352884f19) syz_open_dev$dmmidi(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}, {}]}, 0x54, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') perf_event_open(&(0x7f0000000380)={0x6, 0x70, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4}, 0x0, 0x0, 0x419, 0x9, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={0x0, 0xf2, 0xb2}, &(0x7f0000000400)={'enc=', 'raw', ' hash=', {'blake2b-160-generic\x00'}}, &(0x7f0000000480)="3650cc935578ebf5387552dd8010290ebae3fb8178e4428cbceb1426a24dfdd52059bf2b13efb2524ca2b75ec226c1d6af0c37f12481664c465277ac2d9645797c090a893ca7d945c6a7ce3a13a06aff9ab5e65f93caf02b0d8bdc929efc4e6b79c31b022f7571a832176297361880479781259b3fd90bed9272dc62d8ada350086ab557c1919927a223f7f0046c6c3ee159a67973d6590d20dad9df6be638fa7c7c50c619544dee66e5e1cb5c3eecfa0ce715d04e3877e433c70a190b72fdb8b44a13ea617c559389e7902c92cff632242b9097707812ca89e29af8dd5d2a423a255a0095ecdc9403dff79594869af0c2dc", &(0x7f0000000600)=""/178) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 302.295911] FAULT_INJECTION: forcing a failure. [ 302.295911] name failslab, interval 1, probability 0, space 0, times 1 [ 302.306218] FAT-fs (loop0): Unrecognized mount option "nÙ¼¢ostale_ro" or missing value [ 302.332410] CPU: 0 PID: 11091 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 12:34:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 302.340391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.349747] Call Trace: [ 302.352424] dump_stack+0x188/0x20d [ 302.356130] should_fail.cold+0xa/0x1b [ 302.360042] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 302.365190] __should_failslab+0x115/0x180 [ 302.369468] should_failslab+0x5/0xf [ 302.373200] __kmalloc_track_caller+0x2cb/0x770 [ 302.377918] ? wait_for_completion+0x3c0/0x3c0 [ 302.382539] ? strndup_user+0x70/0xe0 [ 302.386360] ? vfs_write+0x15b/0x550 [ 302.390079] memdup_user+0x22/0xb0 [ 302.393623] strndup_user+0x70/0xe0 [ 302.397276] ksys_mount+0x38/0x150 [ 302.400824] __x64_sys_mount+0xba/0x150 [ 302.404819] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 302.409435] do_syscall_64+0xf9/0x620 [ 302.413303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.418494] RIP: 0033:0x45c849 [ 302.421728] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:34:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) sigaltstack(&(0x7f0000007000/0x1000)=nil, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x8600, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4) [ 302.440637] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.448365] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 302.455664] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 302.462948] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 302.470225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 302.477515] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000000 [ 302.478645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 12:34:04 executing program 3 (fault-call:10 fault-nth:1): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 302.572286] XFS (loop5): Invalid superblock magic number 12:34:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 302.643163] overlayfs: filesystem on './file0' not supported as upperdir 12:34:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) open(0x0, 0xc43, 0xf31272d352884f19) syz_open_dev$dmmidi(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}, {}]}, 0x54, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') perf_event_open(&(0x7f0000000380)={0x6, 0x70, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4}, 0x0, 0x0, 0x419, 0x9, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={0x0, 0xf2, 0xb2}, &(0x7f0000000400)={'enc=', 'raw', ' hash=', {'blake2b-160-generic\x00'}}, &(0x7f0000000480)="3650cc935578ebf5387552dd8010290ebae3fb8178e4428cbceb1426a24dfdd52059bf2b13efb2524ca2b75ec226c1d6af0c37f12481664c465277ac2d9645797c090a893ca7d945c6a7ce3a13a06aff9ab5e65f93caf02b0d8bdc929efc4e6b79c31b022f7571a832176297361880479781259b3fd90bed9272dc62d8ada350086ab557c1919927a223f7f0046c6c3ee159a67973d6590d20dad9df6be638fa7c7c50c619544dee66e5e1cb5c3eecfa0ce715d04e3877e433c70a190b72fdb8b44a13ea617c559389e7902c92cff632242b9097707812ca89e29af8dd5d2a423a255a0095ecdc9403dff79594869af0c2dc", &(0x7f0000000600)=""/178) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 302.754387] FAULT_INJECTION: forcing a failure. [ 302.754387] name failslab, interval 1, probability 0, space 0, times 0 [ 302.815345] CPU: 0 PID: 11127 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 302.823263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.832665] Call Trace: [ 302.835265] dump_stack+0x188/0x20d [ 302.838913] should_fail.cold+0xa/0x1b [ 302.842867] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 302.848046] __should_failslab+0x115/0x180 [ 302.852303] should_failslab+0x5/0xf [ 302.856039] __kmalloc_track_caller+0x2cb/0x770 [ 302.860732] ? strndup_user+0x70/0xe0 [ 302.864572] ? __might_fault+0x192/0x1d0 [ 302.868762] ? _copy_from_user+0xd2/0x140 [ 302.872924] memdup_user+0x22/0xb0 [ 302.876517] strndup_user+0x70/0xe0 [ 302.880154] ksys_mount+0x77/0x150 [ 302.883803] __x64_sys_mount+0xba/0x150 [ 302.887802] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 302.892395] do_syscall_64+0xf9/0x620 [ 302.896210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.901402] RIP: 0033:0x45c849 [ 302.904614] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.923514] RSP: 002b:00007fe979567c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.931281] RAX: ffffffffffffffda RBX: 00007fe9795686d4 RCX: 000000000045c849 [ 302.938564] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 302.945847] RBP: 000000000076bfa0 R08: 0000000020000280 R09: 0000000000000000 [ 302.953115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:34:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bca274769e620a2734fa0095e0612687ecb86a548802a941000000000000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x8}], 0x0, &(0x7f0000000040)) [ 302.960415] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000001 [ 303.102342] XFS (loop5): Invalid superblock magic number [ 303.173243] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 303.277729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 303.303347] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 12:34:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) 12:34:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) accept4(r6, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80, 0x1000) fallocate(r5, 0x0, 0x0, 0x9e18) r7 = open(&(0x7f0000000100)='./bus\x00', 0x400141042, 0x0) write$FUSE_LK(r7, &(0x7f0000000040)={0x28}, 0x28) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x3}) 12:34:05 executing program 3 (fault-call:10 fault-nth:2): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:05 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000180)="0400000000000000666174000404090a0200027400f801", 0x17, 0xfffffffffffffffd}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x3d}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x80000005) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 12:34:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 303.548900] XFS (loop5): Invalid superblock magic number [ 303.568595] FAULT_INJECTION: forcing a failure. [ 303.568595] name failslab, interval 1, probability 0, space 0, times 0 12:34:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f00000015c0)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2a, &(0x7f0000001600)=0x7fff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00140012800900dd48ba409b0c9a130681a5e64e4eeb6303000004000001000000a923f82cde5846922231b91dbc96000000000000000000000000dc4adf33896bcf0db0e075d5057e6de1c4272f6f237e128d2c1430b1e2ae57017da28df0d4f5de248aa4b7438dec24a5f84fef7cfe01f0179e290bd70e47b0493bc00e2e87d7f42e34020290d97174e80e384b5a9a5a18cae1"], 0x3c}, 0x1, 0x6000000}, 0x0) [ 303.610528] CPU: 0 PID: 11175 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 303.618523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.627899] Call Trace: [ 303.630503] dump_stack+0x188/0x20d [ 303.634148] should_fail.cold+0xa/0x1b [ 303.638054] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 303.643183] __should_failslab+0x115/0x180 [ 303.647433] should_failslab+0x5/0xf [ 303.651169] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 303.655869] ? __might_fault+0x192/0x1d0 [ 303.659965] ? _copy_from_user+0xd2/0x140 [ 303.664139] copy_mount_options+0x59/0x390 [ 303.668401] ksys_mount+0xa3/0x150 [ 303.671984] __x64_sys_mount+0xba/0x150 [ 303.675999] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 303.680642] do_syscall_64+0xf9/0x620 [ 303.684462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.689658] RIP: 0033:0x45c849 12:34:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 303.692885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.711850] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.719563] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 303.726846] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 303.734146] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 303.741407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 303.748678] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000002 12:34:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) 12:34:05 executing program 3 (fault-call:10 fault-nth:3): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 303.859033] FAT-fs (loop4): bogus number of reserved sectors [ 303.868916] FAT-fs (loop4): Can't find a valid FAT filesystem [ 303.977101] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=11208 comm=syz-executor.4 [ 304.044562] FAULT_INJECTION: forcing a failure. [ 304.044562] name failslab, interval 1, probability 0, space 0, times 0 [ 304.071140] CPU: 0 PID: 11213 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 304.079052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.088521] Call Trace: [ 304.091132] dump_stack+0x188/0x20d [ 304.094809] should_fail.cold+0xa/0x1b [ 304.098703] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 304.103851] __should_failslab+0x115/0x180 [ 304.108089] should_failslab+0x5/0xf [ 304.111795] kmem_cache_alloc+0x29f/0x710 [ 304.115976] ? find_held_lock+0x2d/0x110 [ 304.120073] getname_flags+0xd2/0x5b0 [ 304.123882] user_path_at_empty+0x2a/0x50 [ 304.128043] do_mount+0x13d/0x2a40 [ 304.131606] ? rcu_read_lock_sched_held+0x10a/0x130 [ 304.136637] ? copy_mount_string+0x40/0x40 [ 304.140908] ? copy_mount_options+0x27a/0x390 [ 304.145428] ksys_mount+0xd7/0x150 [ 304.148981] __x64_sys_mount+0xba/0x150 [ 304.152978] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 304.157589] do_syscall_64+0xf9/0x620 [ 304.157745] XFS (loop5): Invalid superblock magic number [ 304.161396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.161407] RIP: 0033:0x45c849 [ 304.161420] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:34:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 304.161427] RSP: 002b:00007fe979567c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.161439] RAX: ffffffffffffffda RBX: 00007fe9795686d4 RCX: 000000000045c849 [ 304.161447] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 304.161455] RBP: 000000000076bfa0 R08: 0000000020000280 R09: 0000000000000000 [ 304.161462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 304.161469] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000003 [ 304.246091] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 12:34:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) 12:34:06 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x17, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x28000, 0x0, 0x5, 0x2, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4), 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1b) listen(r3, 0x20000003) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xcdd) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r6, 0x208200) r7 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x6) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r7, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) r8 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000042000/0x4000)=nil, 0x4000, 0x17ffffa, 0x1010, r8, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000026b0cd8576bb2b24d51a97282138a2773ae3839638130f168363aa4d78cfbf774f19a0f9afa6d1ac54255906c4c80cefe972ce579318d2c17a5380a94f54d14aaf4db369628ac061fb302c5def9f1700199471e8a110562c3f0bc65310e501ce9c801976bd7edef7149abedf10580000f68a18f33f40a09cec57d99ba9fc46e337869d6df6bbe50bde1a5f51fb69579107f563cf3f1bc3a11a6763bcb53c37fbeba16cfde8a04992e0a7e779c8ab8e7a38853ffb9d2bc8ee6a0139"], 0x1) 12:34:06 executing program 3 (fault-call:10 fault-nth:4): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) [ 304.327179] FAT-fs (loop4): bogus number of reserved sectors [ 304.345904] FAT-fs (loop4): Can't find a valid FAT filesystem 12:34:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:06 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) [ 304.486867] audit: type=1400 audit(1584621246.567:93): avc: denied { bind } for pid=11225 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 304.610834] FAULT_INJECTION: forcing a failure. [ 304.610834] name failslab, interval 1, probability 0, space 0, times 0 12:34:06 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) close(r0) r5 = socket(0x5, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r6) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r7, 0x0, 0x80001d00c0d0) [ 304.661622] CPU: 0 PID: 11249 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 304.669561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.678915] Call Trace: [ 304.681568] dump_stack+0x188/0x20d [ 304.685216] should_fail.cold+0xa/0x1b [ 304.689124] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 304.694257] __should_failslab+0x115/0x180 [ 304.698505] should_failslab+0x5/0xf [ 304.702226] kmem_cache_alloc+0x29f/0x710 [ 304.706409] ? find_held_lock+0x2d/0x110 12:34:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 304.710520] getname_flags+0xd2/0x5b0 [ 304.714339] user_path_at_empty+0x2a/0x50 [ 304.718518] do_mount+0x13d/0x2a40 [ 304.722105] ? rcu_read_lock_sched_held+0x10a/0x130 [ 304.727154] ? copy_mount_string+0x40/0x40 [ 304.731407] ? __might_fault+0x192/0x1d0 [ 304.735482] ? _copy_from_user+0xd2/0x140 [ 304.739654] ? copy_mount_options+0x27a/0x390 [ 304.744174] ksys_mount+0xd7/0x150 [ 304.747732] __x64_sys_mount+0xba/0x150 [ 304.751717] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 304.756331] do_syscall_64+0xf9/0x620 [ 304.760160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.765367] RIP: 0033:0x45c849 [ 304.768567] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.787476] RSP: 002b:00007fe979567c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.795188] RAX: ffffffffffffffda RBX: 00007fe9795686d4 RCX: 000000000045c849 [ 304.799798] XFS (loop5): Invalid superblock magic number [ 304.802459] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 304.802466] RBP: 000000000076bfa0 R08: 0000000020000280 R09: 0000000000000000 [ 304.802473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 304.802480] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000004 12:34:07 executing program 3 (fault-call:10 fault-nth:5): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:07 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:07 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4090, 0xffa}], 0x1, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x600002, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) [ 305.044568] FAULT_INJECTION: forcing a failure. [ 305.044568] name failslab, interval 1, probability 0, space 0, times 0 [ 305.104565] CPU: 0 PID: 11283 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 305.112575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.121934] Call Trace: [ 305.124577] dump_stack+0x188/0x20d [ 305.128246] should_fail.cold+0xa/0x1b [ 305.132150] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.137274] __should_failslab+0x115/0x180 [ 305.141543] should_failslab+0x5/0xf [ 305.145299] kmem_cache_alloc+0x29f/0x710 [ 305.149469] ? lock_downgrade+0x740/0x740 12:34:07 executing program 5 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 305.153639] alloc_vfsmnt+0x23/0x780 [ 305.157376] vfs_kern_mount.part.0+0x27/0x400 [ 305.161897] do_mount+0x4f4/0x2a40 [ 305.165495] ? rcu_read_lock_sched_held+0x10a/0x130 [ 305.170542] ? copy_mount_string+0x40/0x40 [ 305.174806] ? __might_fault+0x192/0x1d0 [ 305.178866] ? _copy_from_user+0xd2/0x140 [ 305.183038] ? copy_mount_options+0x27a/0x390 [ 305.187639] ksys_mount+0xd7/0x150 [ 305.191199] __x64_sys_mount+0xba/0x150 [ 305.195196] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 305.199782] do_syscall_64+0xf9/0x620 [ 305.203600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.208850] RIP: 0033:0x45c849 [ 305.212066] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.231031] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.238776] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 305.246056] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 305.253345] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 305.260620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 305.267908] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000005 [ 305.370015] FAULT_INJECTION: forcing a failure. [ 305.370015] name failslab, interval 1, probability 0, space 0, times 0 [ 305.401538] CPU: 0 PID: 11302 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 305.409494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.418946] Call Trace: [ 305.421547] dump_stack+0x188/0x20d [ 305.425190] should_fail.cold+0xa/0x1b [ 305.429086] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.434219] __should_failslab+0x115/0x180 [ 305.438460] should_failslab+0x5/0xf [ 305.442179] __kmalloc+0x2d3/0x770 [ 305.445774] ? __x64_sys_memfd_create+0x131/0x450 [ 305.450618] ? vfs_write+0x15b/0x550 [ 305.454334] ? strnlen_user+0x158/0x1d0 [ 305.458316] __x64_sys_memfd_create+0x131/0x450 [ 305.462985] ? memfd_fcntl+0x16b0/0x16b0 [ 305.467055] ? __ia32_sys_clock_settime+0x260/0x260 [ 305.472075] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 305.476830] ? trace_hardirqs_off_caller+0x55/0x210 [ 305.481850] ? do_syscall_64+0x21/0x620 [ 305.485832] do_syscall_64+0xf9/0x620 [ 305.489640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.494857] RIP: 0033:0x45c849 [ 305.498052] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.516951] RSP: 002b:00007f4b6335da68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 305.524705] RAX: ffffffffffffffda RBX: 00007f4b6335e6d4 RCX: 000000000045c849 [ 305.531982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 305.539356] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000001 [ 305.546631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 305.553901] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000000 12:34:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) 12:34:08 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus/file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='loaerdir=./bus,workdir=./file1,upperdir=./file0']) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = dup2(r2, r1) dup3(r4, r3, 0x0) getuid() r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = userfaultfd(0x0) r8 = dup2(r6, r5) dup3(r8, r7, 0x0) r9 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000640)={0x0, 0xfffffffc, {r9}, {}, 0x9}) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') lstat(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000340)) 12:34:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:08 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000180)='./file0/bus\x00', 0xfffffffffffff001, 0x4, &(0x7f0000000440)=[{&(0x7f00000001c0)="73b9cd0aa8dd3d4f21a16cf5ba02fffcc899e0a0daaea44c", 0x18, 0x6}, {&(0x7f0000000200)="72baab7d54958e056b851238ea3bbbb6c2010e914d826be1ff37f6e60b38ded7c59a7e4bd2d240bb7c34f7d6bd7a64f4eacfd4c7aaf938cae9f56ea41789d0b215fbc7f459d1e979778be5eacf836922e9b5e83617aa25a8c1fabf93a0a06e34f3c1a260ddc80bb3d19c32bf05212ccb7a5930546a831bcbd399f84fe016a5c85bf5b5b0902ad0c134bf717b786e9a602a04c1e525c1dfd6261ea85ae047412eeebef66ee81f93b3d24c1c229f78ea6e44a68a7416425eabbb2621cbaa9a040c93e1fc", 0xc3, 0x7}, {&(0x7f0000000300)="4a2ad69b168f83685fed67fbe66643b2bfcb2ee36e9cc99726dd8ec57470c4ad138d128603919b6dab435f0cd28cf8d0e4df26bd117fccdc6392028044028e66825e247f09a7eeeb9ff8695b809321e47753842fec1b580d12a0103624eb2bf2864765697113b8c544d94636f589e0e247c401f0014c0b838c95bd02872ee7e9c43aa8d3aaa83e40a2698701d3f087afe0a281856a9b3ccf16ac5c476da171a07f0f790db92b0195362b2cff1b8673a0ac1ef194e0f782c3af47d44f73396981f1b931c15fa88d22f45473e5fe922dbc4fbc727fd9695f79", 0xd8, 0x9}, {&(0x7f0000000400)="4597360408c13aadedea0ee2c4d2530ff73e25588142b801e3d75b8c40e6ddf70f62a85685116b78", 0x28, 0x7fffffff}], 0x8000, &(0x7f00000004c0)='em1$\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x1000, 0x100000001, 0x1f, 0x6f395b7f]}) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, 0xffff) 12:34:08 executing program 3 (fault-call:10 fault-nth:6): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:08 executing program 5 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 306.051638] FAULT_INJECTION: forcing a failure. [ 306.051638] name failslab, interval 1, probability 0, space 0, times 0 12:34:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 306.101633] ceph: device name is missing path (no : separator in /dev/loop0) [ 306.117247] FAULT_INJECTION: forcing a failure. [ 306.117247] name failslab, interval 1, probability 0, space 0, times 0 [ 306.140319] CPU: 0 PID: 11312 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 306.148322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.157686] Call Trace: [ 306.160287] dump_stack+0x188/0x20d [ 306.163942] should_fail.cold+0xa/0x1b [ 306.167861] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.172987] __should_failslab+0x115/0x180 [ 306.177252] should_failslab+0x5/0xf [ 306.180977] kmem_cache_alloc+0x29f/0x710 [ 306.185153] ? find_held_lock+0x2d/0x110 [ 306.189256] ? __alloc_fd+0x43c/0x550 [ 306.193075] ? shmem_destroy_callback+0xb0/0xb0 [ 306.197791] shmem_alloc_inode+0x18/0x40 [ 306.201888] ? shmem_destroy_callback+0xb0/0xb0 [ 306.206590] alloc_inode+0x5d/0x180 [ 306.210218] new_inode_pseudo+0x14/0xe0 [ 306.214202] new_inode+0x1b/0x40 [ 306.217595] shmem_get_inode+0x84/0x780 [ 306.221641] __shmem_file_setup.part.0+0x7a/0x2b0 [ 306.226517] shmem_file_setup+0x61/0x90 [ 306.230511] __x64_sys_memfd_create+0x28a/0x450 [ 306.234686] overlayfs: unrecognized mount option "loaerdir=./bus" or missing value [ 306.235186] ? memfd_fcntl+0x16b0/0x16b0 [ 306.235207] ? __ia32_sys_clock_settime+0x260/0x260 [ 306.251988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.256752] ? trace_hardirqs_off_caller+0x55/0x210 [ 306.261785] ? do_syscall_64+0x21/0x620 [ 306.265771] do_syscall_64+0xf9/0x620 [ 306.269584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.274780] RIP: 0033:0x45c849 [ 306.277992] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.296911] RSP: 002b:00007f4b6337ea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 306.304623] RAX: ffffffffffffffda RBX: 00007f4b6337f6d4 RCX: 000000000045c849 [ 306.311892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 306.312623] overlayfs: unrecognized mount option "loaerdir=./bus" or missing value [ 306.319185] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 306.319193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 306.319199] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000001 12:34:08 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d40000006819001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31821b77481e35fd000c000800ee4000557260ed6cdf9a6505bc4c1d19e0436c78a69f6cd40002000000000137afbe050000005e33a89a235077d4ecf242b77b9b7516e3430c341a73903e8001b95bab58186fb9bb9375f34308ec9c645cb3a8066d250b69c99e62ec5ff81e75adedf879c02c2e02035edbb506", @ANYRES32, @ANYBLOB="8a0008005bfb166eb20dfb9c2de49fa5a62a106f1727765f306e63328c3715aff6e665d9c6a23f2513adaa0e5ee99773ec9c13b19166d85fb22b3259ad326283f17e6e508e814237d0e030de890f505f1a937216d4e408ac3105a04b8c1df222806ed619d3c29b16e435a7544546cd9c4d51d29ff6d4dd3bef5a5dadcf8db629c2935aa3750000"], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:34:08 executing program 5 (fault-call:3 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 306.327995] CPU: 0 PID: 11316 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 306.356794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.366172] Call Trace: [ 306.368765] dump_stack+0x188/0x20d [ 306.372400] should_fail.cold+0xa/0x1b [ 306.376298] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.381450] __should_failslab+0x115/0x180 [ 306.385705] should_failslab+0x5/0xf [ 306.389469] __kmalloc_track_caller+0x2cb/0x770 [ 306.394149] ? kstrdup_const+0x53/0x80 [ 306.398057] ? kmem_cache_alloc+0x31b/0x710 [ 306.402440] kstrdup+0x36/0x70 [ 306.405664] kstrdup_const+0x53/0x80 [ 306.409399] alloc_vfsmnt+0xb5/0x780 [ 306.413128] vfs_kern_mount.part.0+0x27/0x400 [ 306.417648] do_mount+0x4f4/0x2a40 [ 306.421199] ? rcu_read_lock_sched_held+0x10a/0x130 [ 306.426258] ? copy_mount_string+0x40/0x40 [ 306.430547] ? __might_fault+0x192/0x1d0 [ 306.434618] ? _copy_from_user+0xd2/0x140 [ 306.438797] ? copy_mount_options+0x27a/0x390 [ 306.443337] ksys_mount+0xd7/0x150 [ 306.447000] __x64_sys_mount+0xba/0x150 [ 306.450986] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 306.455611] do_syscall_64+0xf9/0x620 [ 306.459415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.464612] RIP: 0033:0x45c849 [ 306.467812] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.486740] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.494572] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 12:34:08 executing program 3 (fault-call:10 fault-nth:7): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 306.501847] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 306.509126] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 306.516382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 306.523694] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000006 [ 306.584686] ceph: device name is missing path (no : separator in /dev/loop0) 12:34:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 306.644468] FAULT_INJECTION: forcing a failure. [ 306.644468] name failslab, interval 1, probability 0, space 0, times 0 [ 306.665811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6504 sclass=netlink_route_socket pig=11337 comm=syz-executor.4 [ 306.735256] CPU: 0 PID: 11336 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 306.740211] FAULT_INJECTION: forcing a failure. [ 306.740211] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 306.743170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.743176] Call Trace: [ 306.743197] dump_stack+0x188/0x20d [ 306.743220] should_fail.cold+0xa/0x1b [ 306.743238] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.743265] __should_failslab+0x115/0x180 [ 306.743281] should_failslab+0x5/0xf [ 306.743295] kmem_cache_alloc+0x29f/0x710 [ 306.743312] ? __put_user_ns+0x60/0x60 [ 306.743332] selinux_inode_alloc_security+0xb1/0x2a0 [ 306.743347] security_inode_alloc+0x83/0xd0 [ 306.743364] inode_init_always+0x569/0xb40 [ 306.743392] alloc_inode+0x7a/0x180 [ 306.813069] new_inode_pseudo+0x14/0xe0 [ 306.817052] new_inode+0x1b/0x40 [ 306.820444] shmem_get_inode+0x84/0x780 [ 306.824441] __shmem_file_setup.part.0+0x7a/0x2b0 [ 306.829296] shmem_file_setup+0x61/0x90 [ 306.833281] __x64_sys_memfd_create+0x28a/0x450 [ 306.837964] ? memfd_fcntl+0x16b0/0x16b0 [ 306.842027] ? __ia32_sys_clock_settime+0x260/0x260 [ 306.847050] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.851812] ? trace_hardirqs_off_caller+0x55/0x210 [ 306.856843] ? do_syscall_64+0x21/0x620 [ 306.860822] do_syscall_64+0xf9/0x620 [ 306.864677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.869868] RIP: 0033:0x45c849 [ 306.873069] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.891969] RSP: 002b:00007f4b6337ea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 306.899699] RAX: ffffffffffffffda RBX: 00007f4b6337f6d4 RCX: 000000000045c849 [ 306.906975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 306.914254] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 306.921528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 306.928837] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000002 [ 306.936131] CPU: 1 PID: 11339 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 306.944073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.953457] Call Trace: [ 306.956064] dump_stack+0x188/0x20d [ 306.959706] should_fail.cold+0xa/0x1b [ 306.963624] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.968746] __alloc_pages_nodemask+0x1c7/0x6a0 [ 306.973426] ? rcu_read_lock_sched_held+0x10a/0x130 [ 306.978466] ? __alloc_pages_slowpath+0x26a0/0x26a0 12:34:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000002c0)={@remote, @dev={0xac, 0x14, 0x14, 0x39}}, 0x8) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400), 0x4) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x1, 0x9, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x1d44) fcntl$notify(r0, 0x402, 0x20) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f00000003c0)=ANY=[@ANYBLOB="040000000c0000000800f1749a00000000000000"]) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x6, 0x6, 0x2) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="c8000000030102010000000000000000070000080800074000000001140005800e000100736e6d705f7472617000000008000840800000000000000006002340000100008400068008000100e000000108000100ac1e0001140005005c5f751e13a61e3fdba2c31e48aff1021400050000000000000000000000ffffac1414bb080001000000007f1c000380060001004e240000060001004e210000060002004e24000014000400ff01000000000000000000000000000108000100ac1414aa08000100e0000002"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x840) write$FUSE_INIT(r1, &(0x7f0000000300)={0x50, 0x0, 0x4, {0x7, 0x1f, 0x0, 0x108028, 0x800, 0x2, 0x1, 0xfffffffc}}, 0x50) [ 306.983503] ? pcpu_balance_workfn+0x1140/0x1140 [ 306.988277] alloc_pages_current+0xff/0x200 [ 306.992613] ? __lockdep_init_map+0x100/0x5a0 [ 306.997136] get_zeroed_page+0x10/0x40 [ 307.001044] mount_fs+0x203/0x30c [ 307.004509] vfs_kern_mount.part.0+0x68/0x400 [ 307.009055] do_mount+0x4f4/0x2a40 [ 307.012642] ? rcu_read_lock_sched_held+0x10a/0x130 [ 307.017669] ? copy_mount_string+0x40/0x40 [ 307.021914] ? __might_fault+0x192/0x1d0 [ 307.025987] ? _copy_from_user+0xd2/0x140 [ 307.030175] ? copy_mount_options+0x27a/0x390 [ 307.034711] ksys_mount+0xd7/0x150 [ 307.038280] __x64_sys_mount+0xba/0x150 [ 307.042274] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 307.046882] do_syscall_64+0xf9/0x620 [ 307.050677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.055856] RIP: 0033:0x45c849 [ 307.059044] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.077924] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 307.085670] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 307.092937] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 307.100196] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 307.107482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 307.114743] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000007 12:34:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) 12:34:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000000071101800000000007d050000000000009500000000000000654a694c9eec8814d5f9deab1ccba311892470c2f410949bbe3a18092826c6fa65aa7b93321e24ec99a2f75d1f9cd66d4d61325309a3a9cdfbe7b3a015e0011419e793cd474e8950d4a65539a55ee9ea682be0bf64b6d8d6d26df42db7725759dac8b9451c2aed539f1cdca71826a22f929298ca768c5eb45e3e9d707f41bf41145d9f74e355727e17c7afdd947161666495e6f6d6065051fae285570dfb9437830211bcca18edaef50b0b92905f365575e8239ab1e71466cc5be724a8d668e1a431a97bd1657a8156a084bdde1cd6fa"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 12:34:09 executing program 5 (fault-call:3 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:09 executing program 3 (fault-call:10 fault-nth:8): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:09 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) getsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000080), &(0x7f0000000140)=0x4) [ 307.475731] FAULT_INJECTION: forcing a failure. [ 307.475731] name failslab, interval 1, probability 0, space 0, times 0 [ 307.527608] CPU: 1 PID: 11361 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 307.535544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.544897] Call Trace: [ 307.547543] dump_stack+0x188/0x20d [ 307.551212] should_fail.cold+0xa/0x1b [ 307.555102] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.560212] __should_failslab+0x115/0x180 [ 307.564440] should_failslab+0x5/0xf [ 307.568146] kmem_cache_alloc+0x29f/0x710 [ 307.572289] ? timespec64_trunc+0xf0/0x180 [ 307.576515] ? inode_init_owner+0x330/0x330 [ 307.580851] __d_alloc+0x2b/0x9e0 [ 307.584320] d_alloc_pseudo+0x19/0x70 [ 307.588115] alloc_file_pseudo+0xc6/0x250 [ 307.592260] ? check_preemption_disabled+0x41/0x280 [ 307.597277] ? alloc_file+0x4d0/0x4d0 [ 307.601078] ? lockdep_annotate_inode_mutex_key+0x3c/0x70 [ 307.606628] ? shmem_get_inode+0x433/0x780 [ 307.610918] __shmem_file_setup.part.0+0x102/0x2b0 [ 307.615853] shmem_file_setup+0x61/0x90 [ 307.619824] __x64_sys_memfd_create+0x28a/0x450 [ 307.624490] ? memfd_fcntl+0x16b0/0x16b0 [ 307.628546] ? __ia32_sys_clock_settime+0x260/0x260 [ 307.633557] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.638304] ? trace_hardirqs_off_caller+0x55/0x210 [ 307.643319] ? do_syscall_64+0x21/0x620 [ 307.647322] do_syscall_64+0xf9/0x620 [ 307.651140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.656343] RIP: 0033:0x45c849 [ 307.659580] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:34:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 307.678483] RSP: 002b:00007f4b6337ea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 307.686196] RAX: ffffffffffffffda RBX: 00007f4b6337f6d4 RCX: 000000000045c849 [ 307.693548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 307.700832] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 307.708146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 307.715441] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000003 [ 307.742211] FAULT_INJECTION: forcing a failure. [ 307.742211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.782163] CPU: 0 PID: 11374 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 307.790080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.799435] Call Trace: [ 307.802055] dump_stack+0x188/0x20d [ 307.805690] should_fail.cold+0xa/0x1b [ 307.809588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.814735] __alloc_pages_nodemask+0x1c7/0x6a0 [ 307.819431] ? __isolate_free_page+0x4c0/0x4c0 [ 307.824027] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 307.829068] ? rcu_read_lock_sched_held+0x10a/0x130 [ 307.834092] ? __alloc_pages_nodemask+0x5d1/0x6a0 [ 307.838946] ? rcu_read_lock_sched_held+0x10a/0x130 [ 307.843998] alloc_pages_current+0xff/0x200 [ 307.848349] get_zeroed_page+0x10/0x40 [ 307.852236] selinux_sb_copy_data+0x28/0x4a0 [ 307.856649] ? pcpu_balance_workfn+0x1140/0x1140 [ 307.861428] security_sb_copy_data+0x64/0xa0 [ 307.865861] mount_fs+0x22a/0x30c [ 307.869319] vfs_kern_mount.part.0+0x68/0x400 [ 307.873819] do_mount+0x4f4/0x2a40 [ 307.877366] ? copy_mount_string+0x40/0x40 [ 307.881600] ? copy_mount_options+0x1e7/0x390 [ 307.886097] ? __sanitizer_cov_trace_pc+0x40/0x50 [ 307.890945] ? copy_mount_options+0x27a/0x390 [ 307.895466] ksys_mount+0xd7/0x150 [ 307.899012] __x64_sys_mount+0xba/0x150 [ 307.902995] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 307.907579] do_syscall_64+0xf9/0x620 [ 307.911394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.916613] RIP: 0033:0x45c849 [ 307.919831] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:34:10 executing program 5 (fault-call:3 fault-nth:4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 307.938740] RSP: 002b:00007fe979546c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 307.946439] RAX: ffffffffffffffda RBX: 00007fe9795476d4 RCX: 000000000045c849 [ 307.953702] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 307.960979] RBP: 000000000076c040 R08: 0000000020000280 R09: 0000000000000000 [ 307.968267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 307.975544] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000008 12:34:10 executing program 3 (fault-call:10 fault-nth:9): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 308.128085] FAULT_INJECTION: forcing a failure. [ 308.128085] name failslab, interval 1, probability 0, space 0, times 0 [ 308.150654] CPU: 0 PID: 11388 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 308.158565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.167920] Call Trace: [ 308.170525] dump_stack+0x188/0x20d [ 308.174181] should_fail.cold+0xa/0x1b [ 308.178092] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 308.183238] __should_failslab+0x115/0x180 [ 308.187485] should_failslab+0x5/0xf [ 308.191209] kmem_cache_alloc+0x29f/0x710 [ 308.195404] ? d_instantiate+0x75/0x90 [ 308.199347] __alloc_file+0x21/0x330 [ 308.203091] alloc_empty_file+0x6d/0x170 [ 308.207163] alloc_file+0x5e/0x4d0 [ 308.210727] alloc_file_pseudo+0x165/0x250 [ 308.214979] ? alloc_file+0x4d0/0x4d0 [ 308.218793] ? shmem_get_inode+0x433/0x780 [ 308.223045] __shmem_file_setup.part.0+0x102/0x2b0 [ 308.228024] shmem_file_setup+0x61/0x90 [ 308.232019] __x64_sys_memfd_create+0x28a/0x450 [ 308.236695] ? memfd_fcntl+0x16b0/0x16b0 [ 308.240758] ? __ia32_sys_clock_settime+0x260/0x260 [ 308.245777] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.250542] ? trace_hardirqs_off_caller+0x55/0x210 [ 308.255564] ? do_syscall_64+0x21/0x620 [ 308.259558] do_syscall_64+0xf9/0x620 [ 308.263380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.268595] RIP: 0033:0x45c849 12:34:10 executing program 0: r0 = socket(0x11, 0x800000003, 0x40) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0xd5) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x10, &(0x7f00000006c0)={r7}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r8, @in6={{0xa, 0x5e24, 0x3f, @empty, 0x4ba0000}}}, &(0x7f0000000240)=0x84) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 308.271811] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.290715] RSP: 002b:00007f4b6335da68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 308.298432] RAX: ffffffffffffffda RBX: 00007f4b6335e6d4 RCX: 000000000045c849 [ 308.305720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 308.312987] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000001 [ 308.320258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 308.327538] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000004 [ 308.347420] FAULT_INJECTION: forcing a failure. [ 308.347420] name failslab, interval 1, probability 0, space 0, times 0 [ 308.361404] CPU: 0 PID: 11392 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 308.369298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.378649] Call Trace: [ 308.381255] dump_stack+0x188/0x20d [ 308.384946] should_fail.cold+0xa/0x1b [ 308.388850] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 308.393957] ? __lock_is_held+0xad/0x140 [ 308.398032] __should_failslab+0x115/0x180 [ 308.402275] should_failslab+0x5/0xf [ 308.405999] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 308.410691] ? lock_acquire+0x170/0x400 [ 308.414670] ? sget_userns+0x1fc/0xcd0 [ 308.418560] ? get_anon_bdev+0xb0/0xb0 [ 308.422452] selinux_sb_alloc_security+0x41/0x210 [ 308.427299] security_sb_alloc+0x5c/0xa0 [ 308.431414] sget_userns+0x204/0xcd0 [ 308.435150] ? get_anon_bdev+0xb0/0xb0 [ 308.439045] ? get_anon_bdev+0xb0/0xb0 [ 308.442930] sget+0x10d/0x150 [ 308.446072] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 308.451004] mount_nodev+0x2c/0x110 [ 308.454646] mount_fs+0xa3/0x30c [ 308.458024] vfs_kern_mount.part.0+0x68/0x400 [ 308.462529] do_mount+0x4f4/0x2a40 [ 308.466079] ? rcu_read_lock_sched_held+0x10a/0x130 [ 308.471225] ? copy_mount_string+0x40/0x40 [ 308.475474] ? __might_fault+0x192/0x1d0 [ 308.479585] ? _copy_from_user+0xd2/0x140 [ 308.483758] ? copy_mount_options+0x27a/0x390 [ 308.488261] ksys_mount+0xd7/0x150 [ 308.491828] __x64_sys_mount+0xba/0x150 [ 308.495811] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 308.500392] do_syscall_64+0xf9/0x620 [ 308.504222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.509431] RIP: 0033:0x45c849 12:34:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 308.512657] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.531555] RSP: 002b:00007fe979567c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.539267] RAX: ffffffffffffffda RBX: 00007fe9795686d4 RCX: 000000000045c849 [ 308.546561] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 308.553832] RBP: 000000000076bfa0 R08: 0000000020000280 R09: 0000000000000000 [ 308.561090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 308.568393] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000009 12:34:10 executing program 5 (fault-call:3 fault-nth:5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:10 executing program 3 (fault-call:10 fault-nth:10): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:10 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000003c0)='batadv0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000380)=0x9, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r6) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="d70384379b4253c74528dc803dd5dbb8b18d4bf77893026dba1d", 0x1a}, {&(0x7f0000000100)="2a173468fa135224fb005fadfe64895241b1dd7f80345b5229d2718db3da2de90e1ec167c0e003a368c71aea19753f5659864bd3df54519a72a95266eb9260705f500d9f96495d318f4d5af98194d4e3b4e3779d39ca11c5f8cd145abb1562a014f4647e353ff7dfddcdfa00826e42214797756d673a5d2a59a5e9414e9f42af1f21987084e554ab34dd81097d535128d6072882bc2ebc4ca07bca9c559b5101d90d6858d27490a28ae35bb944fde4cc454d653625c549b1e9b4060433fc501db2e6e2d12c3905e9061c198e6e66f2d196b9d47ebeb64efd72a6dae6", 0xdc, 0x100}], 0x118488, &(0x7f0000000240)={[{@nolazytime='nolazytime'}, {@quota='quota'}, {@gquota='gquota'}, {@swalloc='swalloc'}, {@nodiscard='nodiscard'}, {@pquota='pquota'}], [{@uid_gt={'uid>', r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, '_systemem0'}}, {@fsname={'fsname', 0x3d, 'bpf\x00'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>', r6}}, {@smackfsdef={'smackfsdef', 0x3d, 'self[}vmnet1wlan1*user{securitycgroup'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x80d1, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 12:34:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 308.798801] FAULT_INJECTION: forcing a failure. [ 308.798801] name failslab, interval 1, probability 0, space 0, times 0 [ 308.869960] IPVS: ftp: loaded support on port[0] = 21 [ 308.892023] FAULT_INJECTION: forcing a failure. [ 308.892023] name failslab, interval 1, probability 0, space 0, times 0 [ 308.892471] CPU: 0 PID: 11402 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 308.911120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.920475] Call Trace: [ 308.923072] dump_stack+0x188/0x20d [ 308.926766] should_fail.cold+0xa/0x1b [ 308.930667] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 308.935835] __should_failslab+0x115/0x180 [ 308.940100] should_failslab+0x5/0xf [ 308.943854] kmem_cache_alloc+0x29f/0x710 [ 308.948019] ? rcu_read_lock_sched_held+0x10a/0x130 [ 308.953074] selinux_file_alloc_security+0xaf/0x190 [ 308.958105] security_file_alloc+0x5c/0xa0 [ 308.962361] __alloc_file+0xc9/0x330 [ 308.966086] alloc_empty_file+0x6d/0x170 [ 308.970164] alloc_file+0x5e/0x4d0 [ 308.973721] alloc_file_pseudo+0x165/0x250 [ 308.977977] ? alloc_file+0x4d0/0x4d0 [ 308.981792] ? shmem_get_inode+0x433/0x780 [ 308.986060] __shmem_file_setup.part.0+0x102/0x2b0 [ 308.991041] shmem_file_setup+0x61/0x90 [ 308.995037] __x64_sys_memfd_create+0x28a/0x450 [ 308.999729] ? memfd_fcntl+0x16b0/0x16b0 [ 309.003800] ? __ia32_sys_clock_settime+0x260/0x260 [ 309.008872] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 309.013654] ? trace_hardirqs_off_caller+0x55/0x210 [ 309.018691] ? do_syscall_64+0x21/0x620 [ 309.022691] do_syscall_64+0xf9/0x620 [ 309.026501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.031723] RIP: 0033:0x45c849 [ 309.034919] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.053827] RSP: 002b:00007f4b6337ea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 309.061557] RAX: ffffffffffffffda RBX: 00007f4b6337f6d4 RCX: 000000000045c849 [ 309.068841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 309.076112] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 309.083380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 309.090661] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000005 [ 309.097957] CPU: 1 PID: 11407 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 309.101224] audit: type=1400 audit(1584621251.147:94): avc: denied { net_admin } for pid=11412 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 309.105894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.139684] Call Trace: [ 309.142285] dump_stack+0x188/0x20d [ 309.145929] should_fail.cold+0xa/0x1b [ 309.149881] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.155011] __should_failslab+0x115/0x180 [ 309.159278] should_failslab+0x5/0xf [ 309.162991] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 309.167738] ? get_anon_bdev+0xb0/0xb0 [ 309.171649] sget_userns+0x11f/0xcd0 [ 309.175386] ? get_anon_bdev+0xb0/0xb0 [ 309.179274] ? get_anon_bdev+0xb0/0xb0 [ 309.183151] sget+0x10d/0x150 [ 309.186278] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 12:34:11 executing program 5 (fault-call:3 fault-nth:6): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 309.191258] mount_nodev+0x2c/0x110 [ 309.194922] mount_fs+0xa3/0x30c [ 309.198302] vfs_kern_mount.part.0+0x68/0x400 [ 309.202821] do_mount+0x4f4/0x2a40 [ 309.206379] ? rcu_read_lock_sched_held+0x10a/0x130 [ 309.211409] ? copy_mount_string+0x40/0x40 [ 309.215663] ? __might_fault+0x192/0x1d0 [ 309.219729] ? _copy_from_user+0xd2/0x140 [ 309.223903] ? copy_mount_options+0x27a/0x390 [ 309.228434] ksys_mount+0xd7/0x150 [ 309.231981] __x64_sys_mount+0xba/0x150 [ 309.235951] ? lockdep_hardirqs_on+0x40b/0x5d0 12:34:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 309.240521] do_syscall_64+0xf9/0x620 [ 309.244318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.249491] RIP: 0033:0x45c849 [ 309.252678] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.271671] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.279365] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 309.286629] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 12:34:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000)=0x7, 0x4) io_setup(0x4, &(0x7f00000004c0)=0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r3, 0x0}]) [ 309.293884] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 309.301239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 309.308512] R13: 0000000000000754 R14: 00000000004ca107 R15: 000000000000000a 12:34:11 executing program 3 (fault-call:10 fault-nth:11): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 309.448958] FAULT_INJECTION: forcing a failure. [ 309.448958] name failslab, interval 1, probability 0, space 0, times 0 [ 309.480295] CPU: 1 PID: 11432 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 309.488322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.497678] Call Trace: [ 309.500294] dump_stack+0x188/0x20d [ 309.503970] should_fail.cold+0xa/0x1b [ 309.507894] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.513012] __should_failslab+0x115/0x180 [ 309.517245] should_failslab+0x5/0xf [ 309.520960] kmem_cache_alloc+0x29f/0x710 [ 309.525122] getname_flags+0xd2/0x5b0 [ 309.528948] do_sys_open+0x294/0x500 [ 309.532692] ? filp_open+0x70/0x70 [ 309.536240] ? check_preemption_disabled+0x41/0x280 [ 309.541262] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 309.546052] ? trace_hardirqs_off_caller+0x55/0x210 [ 309.551076] ? do_syscall_64+0x21/0x620 [ 309.555063] do_syscall_64+0xf9/0x620 [ 309.558878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.564078] RIP: 0033:0x4165e1 [ 309.567276] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 309.586174] RSP: 002b:00007f4b6335da60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 309.593880] RAX: ffffffffffffffda RBX: 00007f4b6335e6d4 RCX: 00000000004165e1 [ 309.596502] FAULT_INJECTION: forcing a failure. [ 309.596502] name failslab, interval 1, probability 0, space 0, times 0 [ 309.601141] RDX: 00007f4b6335db0a RSI: 0000000000000002 RDI: 00007f4b6335db00 [ 309.601149] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 000000000000000a [ 309.601157] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 309.601165] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000006 [ 309.673819] CPU: 1 PID: 11439 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 309.681749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.691099] Call Trace: [ 309.693716] dump_stack+0x188/0x20d [ 309.697384] should_fail.cold+0xa/0x1b [ 309.701299] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.706417] ? __lock_is_held+0xad/0x140 [ 309.710531] __should_failslab+0x115/0x180 [ 309.714772] should_failslab+0x5/0xf [ 309.718483] __kmalloc+0x2d3/0x770 [ 309.722034] ? prealloc_shrinker+0xd6/0x340 [ 309.726363] ? __lockdep_init_map+0x100/0x5a0 [ 309.730902] prealloc_shrinker+0xd6/0x340 [ 309.735093] sget_userns+0x773/0xcd0 [ 309.738862] ? get_anon_bdev+0xb0/0xb0 [ 309.742758] ? get_anon_bdev+0xb0/0xb0 [ 309.746662] sget+0x10d/0x150 [ 309.749773] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 309.754711] mount_nodev+0x2c/0x110 [ 309.758370] mount_fs+0xa3/0x30c [ 309.761765] vfs_kern_mount.part.0+0x68/0x400 [ 309.766272] do_mount+0x4f4/0x2a40 [ 309.769826] ? rcu_read_lock_sched_held+0x10a/0x130 [ 309.774972] ? copy_mount_string+0x40/0x40 [ 309.779224] ? __might_fault+0x192/0x1d0 [ 309.783295] ? _copy_from_user+0xd2/0x140 [ 309.787514] ? copy_mount_options+0x27a/0x390 [ 309.792031] ksys_mount+0xd7/0x150 [ 309.795614] __x64_sys_mount+0xba/0x150 [ 309.799598] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 309.804214] do_syscall_64+0xf9/0x620 [ 309.808076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.813277] RIP: 0033:0x45c849 [ 309.816484] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.835366] RSP: 002b:00007fe979546c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.843073] RAX: ffffffffffffffda RBX: 00007fe9795476d4 RCX: 000000000045c849 [ 309.850349] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 309.857624] RBP: 000000000076c040 R08: 0000000020000280 R09: 0000000000000000 [ 309.864910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:34:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400202, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x3c00, 0xa0, 0x3e0, 0x10, 0x2, 0x0, 0x18, 0x2, {0x20, 0xffffffff}, {0x4a1, 0x50}, {}, {0x80000000, 0xfffffff8, 0x1}, 0x1, 0x100, 0x1f, 0x100, 0x0, 0xd812, 0x8, 0xb9, 0x2, 0xa0000, 0x3, 0x1, 0x30, 0x2, 0x2, 0xb}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000029b4, 0x40004) sendfile(r3, r2, 0x0, 0x500) [ 309.872182] R13: 0000000000000754 R14: 00000000004ca107 R15: 000000000000000b 12:34:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:12 executing program 5 (fault-call:3 fault-nth:7): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:12 executing program 3 (fault-call:10 fault-nth:12): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000)=0x7, 0x4) io_setup(0x4, &(0x7f00000004c0)=0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r3, 0x0}]) 12:34:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r1, @ANYBLOB=',B']) [ 310.113831] FAULT_INJECTION: forcing a failure. [ 310.113831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.125672] CPU: 1 PID: 11450 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 310.133595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.142967] Call Trace: [ 310.143498] FAULT_INJECTION: forcing a failure. [ 310.143498] name failslab, interval 1, probability 0, space 0, times 0 [ 310.145574] dump_stack+0x188/0x20d [ 310.145596] should_fail.cold+0xa/0x1b [ 310.145611] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.145628] ? mark_held_locks+0xf0/0xf0 [ 310.145654] __alloc_pages_nodemask+0x1c7/0x6a0 [ 310.145666] ? shmem_setattr+0x4c7/0xc80 [ 310.182399] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 310.187427] ? inode_init_owner+0x330/0x330 [ 310.191791] ? fs_reclaim_acquire+0x10/0x10 [ 310.196151] ? should_fail+0x142/0x7bc [ 310.200049] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.205170] cache_grow_begin+0x8e/0x8a0 [ 310.209245] kmem_cache_alloc+0x648/0x710 [ 310.213414] getname_flags+0xd2/0x5b0 [ 310.217224] do_sys_open+0x294/0x500 [ 310.220940] ? filp_open+0x70/0x70 [ 310.224485] ? check_preemption_disabled+0x41/0x280 [ 310.229524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 310.234282] ? trace_hardirqs_off_caller+0x55/0x210 [ 310.239332] ? do_syscall_64+0x21/0x620 [ 310.243311] do_syscall_64+0xf9/0x620 [ 310.247147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.252334] RIP: 0033:0x4165e1 [ 310.255524] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 310.274441] RSP: 002b:00007f4b6337ea60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 310.282170] RAX: ffffffffffffffda RBX: 00007f4b6337f6d4 RCX: 00000000004165e1 [ 310.289438] RDX: 00007f4b6337eb0a RSI: 0000000000000002 RDI: 00007f4b6337eb00 [ 310.296705] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 310.303979] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 12:34:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 310.311289] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000007 [ 310.318642] CPU: 0 PID: 11456 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 310.326534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.335952] Call Trace: [ 310.338539] dump_stack+0x188/0x20d [ 310.342174] should_fail.cold+0xa/0x1b [ 310.346098] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.351233] ? __lock_is_held+0xad/0x140 [ 310.355322] __should_failslab+0x115/0x180 [ 310.359573] should_failslab+0x5/0xf 12:34:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 310.363389] __kmalloc+0x2d3/0x770 [ 310.367013] ? __list_lru_init+0xd3/0x700 [ 310.371196] __list_lru_init+0xd3/0x700 [ 310.375182] ? up_write+0x18/0x150 [ 310.378751] sget_userns+0x79f/0xcd0 [ 310.382476] ? get_anon_bdev+0xb0/0xb0 [ 310.386388] ? get_anon_bdev+0xb0/0xb0 [ 310.390283] sget+0x10d/0x150 [ 310.393420] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 310.398370] mount_nodev+0x2c/0x110 [ 310.402010] mount_fs+0xa3/0x30c [ 310.405402] vfs_kern_mount.part.0+0x68/0x400 [ 310.409979] do_mount+0x4f4/0x2a40 [ 310.413536] ? rcu_read_lock_sched_held+0x10a/0x130 [ 310.418595] ? copy_mount_string+0x40/0x40 [ 310.422902] ? __might_fault+0x192/0x1d0 [ 310.426982] ? _copy_from_user+0xd2/0x140 [ 310.431171] ? copy_mount_options+0x27a/0x390 [ 310.435695] ksys_mount+0xd7/0x150 [ 310.439275] __x64_sys_mount+0xba/0x150 [ 310.443262] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 310.447855] do_syscall_64+0xf9/0x620 [ 310.451677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.456883] RIP: 0033:0x45c849 [ 310.460078] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.478959] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.486646] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 310.493898] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 310.501156] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 310.508422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:34:12 executing program 3 (fault-call:10 fault-nth:13): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 310.515828] R13: 0000000000000754 R14: 00000000004ca107 R15: 000000000000000c [ 310.529588] XFS (loop5): Invalid superblock magic number 12:34:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x9}]}}}]}, 0x3c}}, 0x0) 12:34:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0xa, 0x8, &(0x7f0000000340)) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x28140, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="4dfcfffffeffffff2304d0fef8bfb6dcffd854b4c770a4d526b162d3c0c82fb398f4a10702a48772236918fcdf0f50c9fc0800000013a7120f80ec6bcb6537d55425dbfa81026564d15e45fa8aa267f94aa1c565f1ec23a78a05806be2a7f385121f0d746c4ae0090cc47b9456084af3029819f7b8abe168db83a80088144223223fb72c88aa0f3e8db5c1d112f71ba35ab69d7ba620c4ca9cb5c5d1183eb63e200728ccc3974592e1"], &(0x7f0000000280), 0x1000) write$P9_RLCREATE(r2, &(0x7f0000000300)={0x18, 0xf, 0x2, {{0x40, 0x3, 0x2}, 0x1}}, 0x18) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) inotify_init1(0x80000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 12:34:12 executing program 5 (fault-call:3 fault-nth:8): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 310.784044] FAULT_INJECTION: forcing a failure. [ 310.784044] name failslab, interval 1, probability 0, space 0, times 0 [ 310.824880] CPU: 1 PID: 11493 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 310.832822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.842205] Call Trace: [ 310.844817] dump_stack+0x188/0x20d [ 310.848464] should_fail.cold+0xa/0x1b [ 310.852376] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.857489] ? __lock_is_held+0xad/0x140 [ 310.861580] __should_failslab+0x115/0x180 [ 310.865845] should_failslab+0x5/0xf [ 310.869571] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 310.874278] ? kasan_unpoison_shadow+0x30/0x40 [ 310.878883] ? kasan_kmalloc+0xbf/0xe0 [ 310.882811] __memcg_init_list_lru_node+0x7f/0x1e0 [ 310.887758] __list_lru_init+0x3ff/0x700 [ 310.891837] sget_userns+0x79f/0xcd0 [ 310.895593] ? get_anon_bdev+0xb0/0xb0 [ 310.899496] ? get_anon_bdev+0xb0/0xb0 [ 310.903391] sget+0x10d/0x150 [ 310.906519] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 310.910661] FAULT_INJECTION: forcing a failure. [ 310.910661] name failslab, interval 1, probability 0, space 0, times 0 [ 310.911463] mount_nodev+0x2c/0x110 [ 310.911479] mount_fs+0xa3/0x30c [ 310.911497] vfs_kern_mount.part.0+0x68/0x400 [ 310.911515] do_mount+0x4f4/0x2a40 [ 310.911561] ? rcu_read_lock_sched_held+0x10a/0x130 [ 310.943015] ? copy_mount_string+0x40/0x40 [ 310.947359] ? __might_fault+0x192/0x1d0 [ 310.951445] ? _copy_from_user+0xd2/0x140 [ 310.955623] ? copy_mount_options+0x27a/0x390 [ 310.960173] ksys_mount+0xd7/0x150 [ 310.963736] __x64_sys_mount+0xba/0x150 [ 310.967725] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 310.972318] do_syscall_64+0xf9/0x620 [ 310.976153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.981366] RIP: 0033:0x45c849 [ 310.984577] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.003490] RSP: 002b:00007fe979567c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.011221] RAX: ffffffffffffffda RBX: 00007fe9795686d4 RCX: 000000000045c849 [ 311.018506] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 311.025797] RBP: 000000000076bfa0 R08: 0000000020000280 R09: 0000000000000000 [ 311.033072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 311.040401] R13: 0000000000000754 R14: 00000000004ca107 R15: 000000000000000d [ 311.047700] CPU: 0 PID: 11499 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 311.055609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.064984] Call Trace: [ 311.067608] dump_stack+0x188/0x20d [ 311.071293] should_fail.cold+0xa/0x1b [ 311.075253] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.080424] __should_failslab+0x115/0x180 [ 311.084691] should_failslab+0x5/0xf [ 311.088427] kmem_cache_alloc+0x29f/0x710 [ 311.092615] ? __kernel_text_address+0x9/0x30 [ 311.097156] ? unwind_get_return_address+0x5a/0xa0 [ 311.102103] ? __save_stack_trace+0x8a/0xf0 [ 311.106450] __alloc_file+0x21/0x330 [ 311.110191] alloc_empty_file+0x6d/0x170 [ 311.114298] path_openat+0xf2/0x4200 [ 311.118039] ? __lock_acquire+0x6ee/0x49c0 [ 311.122290] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.127686] ? mark_held_locks+0xf0/0xf0 [ 311.131771] ? __isolate_free_page+0x4c0/0x4c0 [ 311.136357] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 311.141127] ? __lock_is_held+0xad/0x140 [ 311.145183] do_filp_open+0x1a1/0x280 [ 311.149028] ? may_open_dev+0xf0/0xf0 [ 311.152843] ? find_held_lock+0x2d/0x110 [ 311.156974] ? __alloc_fd+0x43c/0x550 [ 311.160892] ? lock_downgrade+0x740/0x740 [ 311.165076] ? __lock_is_held+0xad/0x140 [ 311.169235] ? do_raw_spin_unlock+0x171/0x260 [ 311.173732] ? _raw_spin_unlock+0x29/0x40 [ 311.177893] ? __alloc_fd+0x43c/0x550 [ 311.181693] do_sys_open+0x3c0/0x500 [ 311.185412] ? filp_open+0x70/0x70 [ 311.188976] ? check_preemption_disabled+0x41/0x280 [ 311.194023] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 311.198773] ? trace_hardirqs_off_caller+0x55/0x210 [ 311.203784] ? do_syscall_64+0x21/0x620 [ 311.207756] do_syscall_64+0xf9/0x620 [ 311.211664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.216890] RIP: 0033:0x4165e1 [ 311.220089] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 311.238974] RSP: 002b:00007f4b6335da60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 311.246666] RAX: ffffffffffffffda RBX: 00007f4b6335e6d4 RCX: 00000000004165e1 [ 311.253923] RDX: 00007f4b6335db0a RSI: 0000000000000002 RDI: 00007f4b6335db00 [ 311.261190] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 000000000000000a [ 311.268464] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 12:34:13 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 311.275767] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000008 12:34:13 executing program 3 (fault-call:10 fault-nth:14): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:13 executing program 5 (fault-call:3 fault-nth:9): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:13 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r2) semget$private(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000140)) sendmmsg$unix(r4, &(0x7f00000028c0)=[{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000300)="2eb6e6798c6074287349b424594ff8c7d59dc73c19748efc9886dcedfa6fd8e57173cefedb93b91e3604975fd249831bef0ca94a6448b762e66736c29071d36c1db58a4cc49da39d990a88d0ce5a1fa8d6d1be64a9f2c532ed3bc130e52d816f7b92e98cc4c1f483411b4a848142dbd489b8539415080eb2450490c4f998fe5261af7e075cf19568b53904d3751fd2f230f75ea70971746b8233018622e94d9146f704ea5eae24bc3377ce0603e6cb1128dab33f140f5366b55d161faa6414762735e9818d0ca136df2dcd7cfa0266c4ef25d383378f1599ab30a120cf712b26d57f7590", 0xe4}, {&(0x7f0000000640)="5b937653a656e7eb66f36f964edf4dd83d1a9defbbd639b4dcecc81b0e3d42c440cb7b909492d94f40eb2b5f2c361f191cac7d3b3b3c80b505320691ebfa7cd7a8fa5f45259dbbd0b6e5f69b8b805006273abeb3774238f268416416f461c40aeb515c38f6df48aeae0c4e7df6e4c7cf911bf0ded1b950fc09b9df743696fe9e521d99f10c73ef0e8e8d9061e2a1722fd9ee46756a86aedf0a8665eaeb0d3dc14160f53604e6d440139b11a7269ba623c6db22601015a96df377e70d9248662ce51fb741a10d827aebefe0430822c2df198b40542de48dff48721875345a4f7497b2b35f953b5b7aa7d335538fe6f9", 0xef}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="c1c5527037c86084cfdf7835bf43fdcbb7a49440d70906eff15c602e044540519bfbcaad02ac9eadbdebc93b1a3b1fb4eff33d7ad604241554b3ba42e60fc4281da50f0ce27a731d7f270124ea950719fba7a7131e216ee98b4f8108812e4d6ca58baa977fdd4c66ec1c18e86f174d9312a7176232a1666990f2e71ba7423c76837f4f1739ae56adc2852650de5be9f120634b7f2481e998571a7f26fe002f280ee96c93e9502fac918c87167c7bb6237ebfbbd85524419b2a6717742a603b909f723c80159a981d1c2918ec6df1af9a7540b1a3be8ac71c1ad48cd5ac757fa326649362ae55a411144a57d3e51b705c19", 0xf1}, {&(0x7f0000001d80)="a54f206815424efc295f19935412978f5da5378f983b357b32f9f67086ba5fb26643aa8dfdbd493b74d3a4edaa626c5d8f43ba2d34518c68897874811135410bb9a526a07f2fc99438810bdb50deaa2de4f1ba342af8d2393a4d3b987348f169e585c19d7b97854dfce6f4f888d207eebad9ff5ecfb138c014b930d17be2bddf08e4bb2c995ca00bf2096f2a9701e26ed7eaae5c8b9fffcc19d0bdfca318b7885ae4300f6fc48c5332ec1d87faccda025ac97207dcdd1b6695741d64172170f18ce5c610e17514eb4aa794b2a9a856d30e8131eb631a0df66b226744cad550e81a6bcc9489d952b57ad20612172a4240e0594e072d77bed3ef", 0xf9}, {&(0x7f0000001e80)="49926136c84617f2b535339aa27189ffb0967542457312fcde21484c0301cc441aee46375416118dd8225052dda433f1447231f85c7e39b919edf264709202115268c3ec0be31be6a3730d3a392f6602e691273d32bdd6c1f7349f76630d852a984043e62e2ce588749bdd9ef3383ffc5dc6b92831460a917df4cc4591f9b1ab9d1c13def8c0c8f1bb2fdf3d05540acccc4690c08ca79278176298ba4712bd5e1ed47cb973fbff021046e1e6dbddf8dba2b3259903cd01b03770e877e93a05182fa2dff823c9b2fe565de69c95e3e0c2f0c1b8f0cfd94cb22cfa5d8402", 0xdd}, {&(0x7f00000004c0)="5ac00a897474ebc1dd4a35b439a799eac31aed899671198e1ab029311064c3267562aa67c2caf2a521ac9dbcd31e144fc6b5254a87f7f2a97e3d4bb016599508bf6c6ecb66860f3d64f69573ad3e926cb6576e5cd2ed332db7f10ebd448c3fa931f516ef82249a548ea5c29ed9f0362975e6cb7241b0f52f31fb46f255aa8b7fc2558acc8d5325ec034530c9d57da1da3d30cfa18b66bb7ec3aa161098e9a8c5b6bd791f6bdc", 0xa6}], 0x7, &(0x7f0000002100)=[@rights={{0x24, 0x1, 0x1, [r3, r5, r1, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4, 0xffffffffffffffff]}}], 0x78, 0x2000}, {&(0x7f0000002180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002200)="3f87be57b9bbe95a7501c192585b0f4cfa8639506ed5f0b5eaaa39797630a2b3a6d6b1cd97ae179bf297e715d09133", 0x2f}, {&(0x7f0000002240)="3a2569561e229a47964cef3ea816c827466d75ee4f813fb2c10c085775fcd547c14207c360203f5f919306b3fbe4e7f26d681d35d280aef7d83686610a873e1815c398df79e2ed54813a678efdf99222a758b2616508022db37679562b6222d843675eb8f4b014b1383589d95b4fa672e7e6c870fb0878e9b589a8cfc2748ed3be06828f052d07e7ca7d479217c705ef224ba4f32e9267ffacc857bf279ef8a43d3bfb14d4b12b2d7dd5fdf6cffa82743212110471c3f195492f2f07c543633766cf1dc2d33d6ed7af62b958ec030ccc45bb44797ba2c3ddc238a6507c918511da7cc2f009006726566aa71211116a01e07731086bf0db7d1c84e1331d", 0xfd}, {&(0x7f0000002340)="3fb58cb3ee197bc5dc3b2724025ac88e84cbf0b71d690c3a7e893ba809cc4d5dbfee8be24b44e8728c1139bae01c2216225437fd75b4d454ff66d3a01a14e82f4f7fe37034c57a65d7ddf3a189de874163fa16a4c2b297887790b92f74664f8a9bd9614faf1c8ec54946e3101d2188ff56d8e7e556", 0x75}], 0x3, &(0x7f0000002480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x81}, {&(0x7f0000002500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x20040000}, {&(0x7f00000025c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002800), 0x0, &(0x7f0000002880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000}], 0x4, 0x44) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x420) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000000) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0xff}, 0x8000000200000f1e, 0x7, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x9, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000400), 0x0) 12:34:13 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 311.595770] FAULT_INJECTION: forcing a failure. [ 311.595770] name failslab, interval 1, probability 0, space 0, times 0 [ 311.618945] FAULT_INJECTION: forcing a failure. [ 311.618945] name failslab, interval 1, probability 0, space 0, times 0 [ 311.637122] CPU: 0 PID: 11516 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 311.645022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.654382] Call Trace: [ 311.656982] dump_stack+0x188/0x20d [ 311.660653] should_fail.cold+0xa/0x1b [ 311.664698] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.669822] __should_failslab+0x115/0x180 [ 311.674064] should_failslab+0x5/0xf [ 311.677785] kmem_cache_alloc+0x29f/0x710 [ 311.681948] ? rcu_read_lock_sched_held+0x10a/0x130 [ 311.687097] selinux_file_alloc_security+0xaf/0x190 [ 311.692129] security_file_alloc+0x5c/0xa0 [ 311.696378] __alloc_file+0xc9/0x330 [ 311.700117] alloc_empty_file+0x6d/0x170 [ 311.704181] path_openat+0xf2/0x4200 [ 311.707908] ? __lock_acquire+0x6ee/0x49c0 [ 311.712147] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.717515] ? mark_held_locks+0xf0/0xf0 [ 311.721578] ? __isolate_free_page+0x4c0/0x4c0 [ 311.726164] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 311.730860] ? __lock_is_held+0xad/0x140 [ 311.734936] do_filp_open+0x1a1/0x280 [ 311.738749] ? may_open_dev+0xf0/0xf0 [ 311.742554] ? find_held_lock+0x2d/0x110 [ 311.746616] ? __alloc_fd+0x43c/0x550 [ 311.750471] ? lock_downgrade+0x740/0x740 [ 311.754622] ? __lock_is_held+0xad/0x140 [ 311.758696] ? do_raw_spin_unlock+0x171/0x260 [ 311.763205] ? _raw_spin_unlock+0x29/0x40 [ 311.767355] ? __alloc_fd+0x43c/0x550 [ 311.771166] do_sys_open+0x3c0/0x500 [ 311.774888] ? filp_open+0x70/0x70 [ 311.778433] ? check_preemption_disabled+0x41/0x280 [ 311.783465] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 311.788219] ? trace_hardirqs_off_caller+0x55/0x210 12:34:13 executing program 4: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="e6f329c0074e445fdfd5f1"], &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000006c0), &(0x7f0000000700)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x3ff, 0x3ff}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x4}, r2}, 0x14) dup2(0xffffffffffffffff, r1) semget$private(0x0, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x8000000200000f1e, 0x7ff, 0x8000, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x9, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000400), 0x0) [ 311.793245] ? do_syscall_64+0x21/0x620 [ 311.797235] do_syscall_64+0xf9/0x620 [ 311.801116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.806313] RIP: 0033:0x4165e1 [ 311.809521] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 311.828430] RSP: 002b:00007f4b6337ea60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 311.836179] RAX: ffffffffffffffda RBX: 00007f4b6337f6d4 RCX: 00000000004165e1 [ 311.843489] RDX: 00007f4b6337eb0a RSI: 0000000000000002 RDI: 00007f4b6337eb00 [ 311.850778] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 311.858046] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 311.865332] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 0000000000000009 [ 311.894378] CPU: 1 PID: 11512 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 311.902283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.911638] Call Trace: [ 311.914240] dump_stack+0x188/0x20d [ 311.917879] should_fail.cold+0xa/0x1b [ 311.921774] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.926899] ? __lock_is_held+0xad/0x140 [ 311.930972] __should_failslab+0x115/0x180 [ 311.935233] should_failslab+0x5/0xf [ 311.938988] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 311.943684] ? kasan_unpoison_shadow+0x30/0x40 [ 311.948296] ? kasan_kmalloc+0xbf/0xe0 [ 311.952192] __memcg_init_list_lru_node+0x7f/0x1e0 [ 311.957156] __list_lru_init+0x3ff/0x700 [ 311.961233] sget_userns+0x79f/0xcd0 [ 311.964964] ? get_anon_bdev+0xb0/0xb0 [ 311.968864] ? get_anon_bdev+0xb0/0xb0 [ 311.972758] sget+0x10d/0x150 [ 311.975869] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 311.980810] mount_nodev+0x2c/0x110 [ 311.984475] mount_fs+0xa3/0x30c [ 311.987975] vfs_kern_mount.part.0+0x68/0x400 [ 311.992500] do_mount+0x4f4/0x2a40 [ 311.996058] ? rcu_read_lock_sched_held+0x10a/0x130 [ 312.001109] ? copy_mount_string+0x40/0x40 [ 312.005368] ? __might_fault+0x192/0x1d0 [ 312.009451] ? _copy_from_user+0xd2/0x140 [ 312.013610] ? copy_mount_options+0x27a/0x390 [ 312.018129] ksys_mount+0xd7/0x150 [ 312.021679] __x64_sys_mount+0xba/0x150 [ 312.025667] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 312.030261] do_syscall_64+0xf9/0x620 [ 312.034075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.039337] RIP: 0033:0x45c849 12:34:14 executing program 5 (fault-call:3 fault-nth:10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 312.042543] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.061474] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.069193] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 312.076467] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 312.083742] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 312.091117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 312.098397] R13: 0000000000000754 R14: 00000000004ca107 R15: 000000000000000e [ 312.219375] FAULT_INJECTION: forcing a failure. [ 312.219375] name failslab, interval 1, probability 0, space 0, times 0 [ 312.241292] CPU: 1 PID: 11537 Comm: syz-executor.5 Not tainted 4.19.111-syzkaller #0 [ 312.249212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.258572] Call Trace: [ 312.261169] dump_stack+0x188/0x20d [ 312.264855] should_fail.cold+0xa/0x1b [ 312.268756] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 312.273868] ? __lock_is_held+0xad/0x140 [ 312.277945] __should_failslab+0x115/0x180 [ 312.282204] should_failslab+0x5/0xf [ 312.285939] kmem_cache_alloc+0x29f/0x710 [ 312.290113] ? find_held_lock+0x2d/0x110 [ 312.294184] ? __schedule+0x1477/0x1d80 [ 312.298165] __kernfs_new_node+0xd2/0x680 [ 312.302320] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 312.307081] ? _raw_spin_unlock_irq+0x24/0x80 [ 312.311583] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 312.316190] ? mark_held_locks+0xf0/0xf0 [ 312.320261] kernfs_new_node+0x92/0x120 [ 312.324260] kernfs_create_dir_ns+0x48/0x150 [ 312.328688] internal_create_group+0x1bf/0xb90 [ 312.333272] ? find_held_lock+0x2d/0x110 [ 312.337439] ? lo_ioctl+0xf54/0x20e0 [ 312.341177] ? lock_acquire+0x170/0x400 [ 312.345189] ? remove_files.isra.0+0x190/0x190 [ 312.349792] ? lock_downgrade+0x740/0x740 [ 312.353953] lo_ioctl+0xf89/0x20e0 [ 312.357511] ? lo_rw_aio+0x12f0/0x12f0 [ 312.361471] blkdev_ioctl+0xbf7/0x1a1c [ 312.365401] ? blkpg_ioctl+0x9e0/0x9e0 [ 312.369291] ? mark_held_locks+0xf0/0xf0 [ 312.373396] ? find_held_lock+0x2d/0x110 [ 312.377586] ? debug_check_no_obj_freed+0x20a/0x42e [ 312.382630] block_ioctl+0xe9/0x130 [ 312.386262] ? blkdev_fallocate+0x3f0/0x3f0 [ 312.390605] do_vfs_ioctl+0xcda/0x12e0 [ 312.394510] ? selinux_file_ioctl+0x46c/0x5d0 [ 312.399006] ? selinux_file_ioctl+0x125/0x5d0 [ 312.403503] ? check_preemption_disabled+0x41/0x280 [ 312.408525] ? ioctl_preallocate+0x200/0x200 [ 312.412952] ? selinux_file_mprotect+0x600/0x600 12:34:14 executing program 3 (fault-call:10 fault-nth:15): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 312.417710] ? __fget+0x340/0x510 [ 312.421166] ? iterate_fd+0x350/0x350 [ 312.424965] ? putname+0xe1/0x120 [ 312.428458] ? security_file_ioctl+0x6c/0xb0 [ 312.432881] ksys_ioctl+0x9b/0xc0 [ 312.436350] __x64_sys_ioctl+0x6f/0xb0 [ 312.440240] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 312.444846] do_syscall_64+0xf9/0x620 [ 312.448680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.453882] RIP: 0033:0x45c6b7 [ 312.457075] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.476000] RSP: 002b:00007f4b6335da68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.483714] RAX: ffffffffffffffda RBX: 00007f4b6335e6d4 RCX: 000000000045c6b7 [ 312.490984] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 312.498234] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 000000000000000a [ 312.505557] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 312.512820] R13: 0000000000000be8 R14: 00000000004ce0c1 R15: 000000000000000a 12:34:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_submit(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{}, 0x8}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x1000, @empty, 0x4}, @in={0x2, 0x0, @empty}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getpid() unshare(0x40000000) 12:34:14 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 312.669174] FAULT_INJECTION: forcing a failure. [ 312.669174] name failslab, interval 1, probability 0, space 0, times 0 [ 312.714129] XFS (loop5): Invalid superblock magic number [ 312.737159] CPU: 1 PID: 11546 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 312.745058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.754421] Call Trace: [ 312.757052] dump_stack+0x188/0x20d [ 312.760697] should_fail.cold+0xa/0x1b [ 312.764619] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 312.769729] ? __lock_is_held+0xad/0x140 [ 312.773829] __should_failslab+0x115/0x180 [ 312.778070] should_failslab+0x5/0xf [ 312.781804] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 312.786518] ? kasan_unpoison_shadow+0x30/0x40 [ 312.791122] ? kasan_kmalloc+0xbf/0xe0 [ 312.795034] __memcg_init_list_lru_node+0x7f/0x1e0 [ 312.799978] __list_lru_init+0x3ff/0x700 [ 312.804048] sget_userns+0x79f/0xcd0 [ 312.807765] ? get_anon_bdev+0xb0/0xb0 [ 312.811666] ? get_anon_bdev+0xb0/0xb0 [ 312.815562] sget+0x10d/0x150 [ 312.818722] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 312.823673] mount_nodev+0x2c/0x110 [ 312.827316] mount_fs+0xa3/0x30c [ 312.830699] vfs_kern_mount.part.0+0x68/0x400 [ 312.835218] do_mount+0x4f4/0x2a40 [ 312.838769] ? rcu_read_lock_sched_held+0x10a/0x130 [ 312.839222] IPVS: ftp: loaded support on port[0] = 21 [ 312.843802] ? copy_mount_string+0x40/0x40 [ 312.843818] ? __might_fault+0x192/0x1d0 [ 312.843832] ? _copy_from_user+0xd2/0x140 [ 312.843848] ? copy_mount_options+0x27a/0x390 [ 312.843863] ksys_mount+0xd7/0x150 [ 312.843878] __x64_sys_mount+0xba/0x150 [ 312.873427] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 312.878019] do_syscall_64+0xf9/0x620 [ 312.881821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.887019] RIP: 0033:0x45c849 [ 312.890227] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:34:15 executing program 3 (fault-call:10 fault-nth:16): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 312.909124] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.916856] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 312.924126] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 312.931424] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 312.938716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 312.945984] R13: 0000000000000754 R14: 00000000004ca107 R15: 000000000000000f 12:34:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000280)={0x7f, 0x0, 0x4, 0x100, 0x4717, {r3, r4/1000+30000}, {0x5, 0x2, 0x3, 0x3f, 0x5, 0x7, "958937a6"}, 0x4, 0x4, @planes=&(0x7f0000000200)={0xffffffff, 0x15, @userptr=0x3, 0x7fffffff}, 0x27, 0x0, r5}) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x26c, &(0x7f00000003c0), 0x89, &(0x7f0000000880), 0x1a5}}, {{&(0x7f0000000040)=@sco, 0x359, &(0x7f0000000a80), 0x2ef, &(0x7f0000000c40)}, 0x1ee5ff7f}], 0x4000000000002f0, 0x0) 12:34:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 313.185052] FAULT_INJECTION: forcing a failure. [ 313.185052] name failslab, interval 1, probability 0, space 0, times 0 [ 313.214373] CPU: 0 PID: 11571 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 313.222291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.231668] Call Trace: [ 313.234269] dump_stack+0x188/0x20d [ 313.237928] should_fail.cold+0xa/0x1b [ 313.241844] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 313.246977] ? __lock_is_held+0xad/0x140 [ 313.250552] IPVS: ftp: loaded support on port[0] = 21 [ 313.251066] __should_failslab+0x115/0x180 [ 313.260481] should_failslab+0x5/0xf [ 313.264203] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 313.268883] ? kasan_unpoison_shadow+0x30/0x40 [ 313.273489] ? kasan_kmalloc+0xbf/0xe0 [ 313.277459] __memcg_init_list_lru_node+0x7f/0x1e0 [ 313.282421] __list_lru_init+0x3ff/0x700 [ 313.286523] sget_userns+0x79f/0xcd0 [ 313.290267] ? get_anon_bdev+0xb0/0xb0 [ 313.294222] ? get_anon_bdev+0xb0/0xb0 [ 313.298117] sget+0x10d/0x150 [ 313.301233] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 313.306177] mount_nodev+0x2c/0x110 [ 313.309819] mount_fs+0xa3/0x30c [ 313.313274] vfs_kern_mount.part.0+0x68/0x400 [ 313.317807] do_mount+0x4f4/0x2a40 [ 313.321359] ? rcu_read_lock_sched_held+0x10a/0x130 [ 313.326386] ? copy_mount_string+0x40/0x40 [ 313.330627] ? __might_fault+0x192/0x1d0 [ 313.334695] ? _copy_from_user+0xd2/0x140 [ 313.338856] ? copy_mount_options+0x27a/0x390 [ 313.343385] ksys_mount+0xd7/0x150 [ 313.347015] __x64_sys_mount+0xba/0x150 [ 313.351001] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 313.355612] do_syscall_64+0xf9/0x620 [ 313.359425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.364627] RIP: 0033:0x45c849 12:34:15 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x8ac) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000e02000/0x2000)=nil, &(0x7f0000e19000/0x1000)=nil, &(0x7f0000e81000/0x1000)=nil, &(0x7f0000f8b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000e97000/0x1000)=nil, &(0x7f0000000280)="1872f07259f34aa21f7577e1cf177380f44833a58de9852d7356ea2d4774b36768771ff87aa231bf5748c977d433522cc04503d972184be0bafc08b227255c0053bc921473a2b5030f", 0x49, r6}, 0x68) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}], 0x6b}}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x442400, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 12:34:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 313.367840] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.386745] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 313.394470] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 313.401723] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 313.409007] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 313.416267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 313.423529] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000010 [ 313.428855] XFS (loop5): Invalid superblock magic number 12:34:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:15 executing program 3 (fault-call:10 fault-nth:17): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setreuid(0x0, r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=@flushsa={0x248, 0x1c, 0x1, 0x70bd26, 0x25dfdbfc, {0x6c}, [@replay_val={0x10, 0xa, {0x70bd27, 0x70bd2b, 0x9}}, @algo_aead={0x4c, 0x12, {{'authencesn(sha3-512-ce,xchacha12-arm)\x00'}}}, @replay_thresh={0x8, 0xb, 0x10000}, @algo_aead={0xef, 0x12, {{'authencesn(wp256-generic,lrw-camellia-aesni-avx2)\x00'}, 0x518, 0x40, "46a655284882b4a49ac5fe65f35f1e12c5da97969654481cba3429f2bc76a3499da12f8dde4513f89faca344c503063ba48b623b7dfb0856255793c74a93c1960f691510fd748f6dd5477b190c36d270152d199b5687482bd7dcdfab03bf381f1e74ee97ecd7e98bb77319e26372073e298fa253cda41b3b6248dd837168153ac3766112853aa8e3ff2c388f91d9db6bf4bb23baef06aea1b7350eeba433348b0405d4"}}, @replay_thresh={0x8, 0xb, 0x3}, @policy={0xac, 0x7, {{@in=@broadcast, @in6=@empty, 0x4e23, 0x0, 0x4e22, 0x5, 0xa, 0x20, 0x80, 0x29, 0x0, r2}, {0x3, 0x4, 0x7fffffff, 0x3f, 0xb1, 0x80000001, 0x1, 0x4}, {0x8, 0x4, 0x1, 0x400}, 0x7fffffff, 0x6e6bb1, 0x1, 0x1, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@local, 0x0, 0xa}}]}, 0x248}, 0x1, 0x0, 0x0, 0x4004814}, 0x40001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000004060101000000000400000000000900020073797a31000000000500010006000000040007808d91002ddddfd6fda97b9e85dbbf05aae913d8eda4050922eb7d5286a9eef97535fa3fdacb2db199aca2cd703fc32700"/103], 0x2c}}, 0x0) 12:34:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 313.636992] SELinux: security_context_str_to_sid(system_u) failed for (dev 9p, type 9p) errno=-22 12:34:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 313.689263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:34:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x2, &(0x7f00000016c0)=[{0x0, 0x0, 0x2fd}, {&(0x7f0000000400)="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", 0x1cd, 0x9}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$isdn(r2, &(0x7f00000000c0)={0x8, 0x40, "1e0b07e4509e66eaee1bda35512cc1b1b2c66eff0b204fac15ba4840bbab4f3e3c8349872f23c28be4c715ad466b3df519d5d77976e2b62f9145c930cc683a7b1da845849ecde700d92537aaeb870928caaf4d2e118b44026df2b2827877ff09f687941a456f09f6b9e7c5e102c66a66f72702da23d809f45d28cebafe8913cd06e3e07f666ccbef675a500352564ebdacd4653afcc4"}, 0x9e, 0x20040800, &(0x7f0000000000)={0x22, 0x7f, 0x6, 0x80, 0x1}, 0x6) 12:34:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 313.839610] XFS (loop5): Invalid superblock magic number [ 313.859566] FAULT_INJECTION: forcing a failure. [ 313.859566] name failslab, interval 1, probability 0, space 0, times 0 [ 313.884587] CPU: 1 PID: 11627 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 313.892485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.901917] Call Trace: [ 313.904657] dump_stack+0x188/0x20d [ 313.908286] should_fail.cold+0xa/0x1b [ 313.912226] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 313.917312] ? __lock_is_held+0xad/0x140 [ 313.921405] __should_failslab+0x115/0x180 [ 313.925682] should_failslab+0x5/0xf [ 313.929379] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 313.934028] ? kasan_unpoison_shadow+0x30/0x40 [ 313.938615] ? kasan_kmalloc+0xbf/0xe0 [ 313.942501] __memcg_init_list_lru_node+0x7f/0x1e0 [ 313.947446] __list_lru_init+0x3ff/0x700 [ 313.951555] sget_userns+0x79f/0xcd0 [ 313.955294] ? get_anon_bdev+0xb0/0xb0 [ 313.959177] ? get_anon_bdev+0xb0/0xb0 [ 313.963061] sget+0x10d/0x150 [ 313.966195] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 313.971139] mount_nodev+0x2c/0x110 [ 313.974783] mount_fs+0xa3/0x30c [ 313.978136] vfs_kern_mount.part.0+0x68/0x400 [ 313.982619] do_mount+0x4f4/0x2a40 [ 313.986147] ? rcu_read_lock_sched_held+0x10a/0x130 [ 313.991147] ? copy_mount_string+0x40/0x40 [ 313.995375] ? __might_fault+0x192/0x1d0 [ 313.999454] ? _copy_from_user+0xd2/0x140 [ 314.003620] ? copy_mount_options+0x27a/0x390 [ 314.008101] ksys_mount+0xd7/0x150 [ 314.011626] __x64_sys_mount+0xba/0x150 [ 314.015585] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 314.020160] do_syscall_64+0xf9/0x620 [ 314.024000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.029210] RIP: 0033:0x45c849 12:34:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 314.032388] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.051287] RSP: 002b:00007fe979567c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.059022] RAX: ffffffffffffffda RBX: 00007fe9795686d4 RCX: 000000000045c849 [ 314.066283] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 314.073559] RBP: 000000000076bfa0 R08: 0000000020000280 R09: 0000000000000000 [ 314.080815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 314.088068] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000011 12:34:16 executing program 3 (fault-call:10 fault-nth:18): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x80}, {0x5, 0x0, 0x0, 0x50000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'macsec0\x00', {0x3}, 0x4}) 12:34:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 314.182162] Dev loop4: unable to read RDB block 2 [ 314.213801] loop4: AHDI p1 p2 12:34:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 314.239208] loop4: partition table partially beyond EOD, truncated [ 314.275506] loop4: p1 start 1446514855 is beyond EOD, truncated [ 314.305907] FAULT_INJECTION: forcing a failure. [ 314.305907] name failslab, interval 1, probability 0, space 0, times 0 [ 314.348197] CPU: 0 PID: 11649 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 314.356095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.365462] Call Trace: [ 314.368075] dump_stack+0x188/0x20d [ 314.371736] should_fail.cold+0xa/0x1b [ 314.375666] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 314.380856] ? __lock_is_held+0xad/0x140 [ 314.384948] __should_failslab+0x115/0x180 [ 314.389194] should_failslab+0x5/0xf [ 314.392909] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 314.397605] ? kasan_unpoison_shadow+0x30/0x40 [ 314.402199] ? kasan_kmalloc+0xbf/0xe0 [ 314.406080] __memcg_init_list_lru_node+0x7f/0x1e0 [ 314.411008] __list_lru_init+0x3ff/0x700 [ 314.415154] sget_userns+0x79f/0xcd0 [ 314.418879] ? get_anon_bdev+0xb0/0xb0 [ 314.422770] ? get_anon_bdev+0xb0/0xb0 [ 314.426667] sget+0x10d/0x150 [ 314.429822] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 314.434763] mount_nodev+0x2c/0x110 [ 314.438412] mount_fs+0xa3/0x30c [ 314.441811] vfs_kern_mount.part.0+0x68/0x400 [ 314.446335] do_mount+0x4f4/0x2a40 [ 314.449859] ? rcu_read_lock_sched_held+0x10a/0x130 [ 314.455011] ? copy_mount_string+0x40/0x40 [ 314.459277] ? __might_fault+0x192/0x1d0 [ 314.463350] ? _copy_from_user+0xd2/0x140 [ 314.467511] ? copy_mount_options+0x27a/0x390 [ 314.472100] ksys_mount+0xd7/0x150 [ 314.475648] __x64_sys_mount+0xba/0x150 [ 314.479624] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 314.484194] do_syscall_64+0xf9/0x620 [ 314.487994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.493181] RIP: 0033:0x45c849 12:34:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:16 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) renameat2(r0, &(0x7f0000000340)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 314.496375] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.515278] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.523007] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 314.530265] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 314.537518] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 314.544776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 314.552068] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000012 12:34:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 314.639627] Dev loop4: unable to read RDB block 2 12:34:16 executing program 3 (fault-call:10 fault-nth:19): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 314.661754] loop4: AHDI p1 p2 [ 314.681395] loop4: partition table partially beyond EOD, truncated [ 314.700967] loop4: p1 start 1446514855 is beyond EOD, truncated 12:34:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 314.706404] XFS (loop5): Invalid superblock magic number 12:34:16 executing program 4: r0 = getpgrp(0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="5b643a3a642430387a3a323a55368835593183b202b5dfc4bcfa76f3cfe463fccd930e18dc038a4d5a5ecc341e596985fc8e9a58688c15f02fe425f7676728aa5d7fedd3c7386c8b57fc304dea396b7bd3f6eb643a9bfa148e53fd653a28fc5bb43a60362595195384386f57512c59942a6d91d3efea35aa429e99fe439a9e03380a5aa22a7b134ae7a5ff1d6afb85db5795f124a5895c951c7ecd0e63b465068a94ee194a3832f74fbabdd74804c00bae69bd84dac119777c90dbe402f86e6b0cafc9731f9b63f737d1cb1a3329a77568ce5f67f89689fcb1e40069f6ba36"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000010000108000000001330c169cac3efd5", @ANYRES32=r7, @ANYBLOB="00000000000000000c002b80080003000a000000"], 0x2c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@ipv4={[], [], @multicast2}, r7}, 0x14) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) tkill(r0, 0x1000000000014) 12:34:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 314.903126] FAULT_INJECTION: forcing a failure. [ 314.903126] name failslab, interval 1, probability 0, space 0, times 0 [ 314.951407] CPU: 0 PID: 11688 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 314.959322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.968685] Call Trace: [ 314.971332] dump_stack+0x188/0x20d [ 314.974988] should_fail.cold+0xa/0x1b [ 314.978910] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 314.984022] ? __lock_is_held+0xad/0x140 [ 314.988106] __should_failslab+0x115/0x180 [ 314.992382] should_failslab+0x5/0xf [ 314.996128] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 315.000837] ? kasan_unpoison_shadow+0x30/0x40 [ 315.005432] ? kasan_kmalloc+0xbf/0xe0 [ 315.009373] __memcg_init_list_lru_node+0x7f/0x1e0 [ 315.014311] __list_lru_init+0x3ff/0x700 [ 315.018380] sget_userns+0x79f/0xcd0 [ 315.022117] ? get_anon_bdev+0xb0/0xb0 [ 315.026010] ? get_anon_bdev+0xb0/0xb0 [ 315.029904] sget+0x10d/0x150 [ 315.033033] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 315.038002] mount_nodev+0x2c/0x110 [ 315.041636] mount_fs+0xa3/0x30c [ 315.045027] vfs_kern_mount.part.0+0x68/0x400 [ 315.049538] do_mount+0x4f4/0x2a40 [ 315.053109] ? copy_mount_string+0x40/0x40 [ 315.057358] ? copy_mount_options+0x205/0x390 [ 315.061865] ? write_comp_data+0x17/0x70 [ 315.065951] ? copy_mount_options+0x27a/0x390 [ 315.070480] ksys_mount+0xd7/0x150 [ 315.074048] __x64_sys_mount+0xba/0x150 [ 315.078032] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 315.082628] do_syscall_64+0xf9/0x620 [ 315.086434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.091638] RIP: 0033:0x45c849 12:34:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x12, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b70000000000000007000000010000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xca, &(0x7f00000003c0)=""/202, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x78) [ 315.094833] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.113749] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.121500] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 315.128770] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 315.136042] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 315.143313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:34:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 315.150586] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000013 12:34:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:17 executing program 3 (fault-call:10 fault-nth:20): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:17 executing program 0: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x5ec, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x4a, @remote, 0xfffffffb}}}, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xffffffa8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x200000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000200)={0x51, 0xffc1, 0x200, {0x31, 0x2}, {0x7, 0x7f}, @ramp={0x6, 0x6ffb, {0x1, 0x8, 0x7ff, 0x81}}}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) [ 315.326538] ceph: device name is missing path (no : separator in [d::d$08z:2:U6ˆ5Y1ƒ²µßļúvóÏäcüÍ“ÜŠMZ^Ì4Yi…üŽšXhŒð/ä%÷gg(ª]íÓÇ8l‹Wü0Mê9k{Óöëd:›úŽSýe:(ü[´:`6%•S„8oWQ,Y”*m‘Óïê5ªBž™þCšž8 [ 315.326538] Z¢*{Jç¥ÿjû…ÛW•ñ$¥‰\•~Íc´eŠ”îJ82÷Oº½×HÀ ®i½„ÚÁw|Ûäønk ¯És›c÷7ÑË3)§uhÎ_gø–‰ü±ä) 12:34:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r2, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 315.437156] XFS (loop5): Invalid superblock magic number 12:34:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 315.603023] FAULT_INJECTION: forcing a failure. [ 315.603023] name failslab, interval 1, probability 0, space 0, times 0 [ 315.642312] ceph: device name is missing path (no : separator in [d::d$08z:2:U6ˆ5Y1ƒ²µßļúvóÏäcüÍ“ÜŠMZ^Ì4Yi…üŽšXhŒð/ä%÷gg(ª]íÓÇ8l‹Wü0Mê9k{Óöëd:›úŽSýe:(ü[´:`6%•S„8oWQ,Y”*m‘Óïê5ªBž™þCšž8 [ 315.642312] Z¢*{Jç¥ÿjû…ÛW•ñ$¥‰\•~Íc´eŠ”îJ82÷Oº½×HÀ ®i½„ÚÁw|Ûäønk ¯És›c÷7ÑË3)§uhÎ_gø–‰ü±ä) [ 315.699562] CPU: 1 PID: 11734 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 315.707462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.716860] Call Trace: [ 315.719502] dump_stack+0x188/0x20d [ 315.723192] should_fail.cold+0xa/0x1b [ 315.727106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 315.732230] ? __lock_is_held+0xad/0x140 [ 315.736307] __should_failslab+0x115/0x180 [ 315.740587] should_failslab+0x5/0xf [ 315.744309] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 315.748988] ? kasan_unpoison_shadow+0x30/0x40 [ 315.753645] ? kasan_kmalloc+0xbf/0xe0 [ 315.757554] __memcg_init_list_lru_node+0x7f/0x1e0 [ 315.762518] __list_lru_init+0x3ff/0x700 [ 315.766594] sget_userns+0x79f/0xcd0 [ 315.770330] ? get_anon_bdev+0xb0/0xb0 [ 315.774223] ? get_anon_bdev+0xb0/0xb0 [ 315.778126] sget+0x10d/0x150 [ 315.781275] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 315.786226] mount_nodev+0x2c/0x110 [ 315.789906] mount_fs+0xa3/0x30c [ 315.793294] vfs_kern_mount.part.0+0x68/0x400 [ 315.797832] do_mount+0x4f4/0x2a40 [ 315.801379] ? rcu_read_lock_sched_held+0x10a/0x130 [ 315.806468] ? copy_mount_string+0x40/0x40 [ 315.810715] ? __might_fault+0x192/0x1d0 [ 315.814784] ? _copy_from_user+0xd2/0x140 [ 315.818947] ? copy_mount_options+0x27a/0x390 [ 315.823549] ksys_mount+0xd7/0x150 [ 315.827132] __x64_sys_mount+0xba/0x150 [ 315.831116] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 315.835716] do_syscall_64+0xf9/0x620 [ 315.839631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.844841] RIP: 0033:0x45c849 12:34:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0xff}) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="080085cc8013f020eae3cfa2390000080006007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x10) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) 12:34:18 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\x04\x00\x00\xcf\xc4\x8e>\x9f6\xa4/\xf8\xbf+RAbJ\xfeUbt\x88\xe4\xc6\xc6`\xf0N&\xba\xaeTM,g\xb6\tA$\xa6D\xed\x01\x16Nf\x8594\xb9\xdc\xaa\x1e\xdc\xdbZf\x87\xd5\v\xa07\xe0{\"\x197\xfdm)\xaf5\xfb!\xe9\x8f\xcc[h&\xec9\n\xa9\xfb\xdf\xc9\xc7d\xc9\xc3\xe6\x1b 3\xf1\x99\x82\xaaj\xfa\x8f\x91\x01\xddU\x13\xdaJ\x11\x13\xd4J\xdaaM#Z\xe6\xf6\tV]\xd1\xb6\xef\xa1@R\xe7\xbcvsEB\xf5\xc16\xaa\xcab}\xf51g', 0x7) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27b90300060000000000000000b738000000000035f4c38442a3bc8220000500000004020300000000000000400004020000002ebf31a897ff080000000000090000f8ffffffffffffff03000000000000000d60395a7088d7c27f000000a1010001007ea85ca6574c9a992da4030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410500000000000000f9dc89d1ffd9f2174407619e3a318378887fa2920041a24865a1316973981f6722bc679d3e85ca9d4f92e84e2dcae7"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 315.848034] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.866979] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.874714] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 315.882003] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 315.889281] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 315.896559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 315.903960] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000014 12:34:18 executing program 3 (fault-call:10 fault-nth:21): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 316.057851] XFS (loop5): Invalid superblock magic number 12:34:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:18 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x4000001, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x1ff, 0x4, 0x4aec, 0x6, 0xc0000000}, 0x14) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) [ 316.194971] FAULT_INJECTION: forcing a failure. [ 316.194971] name failslab, interval 1, probability 0, space 0, times 0 [ 316.252539] CPU: 0 PID: 11778 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 316.260456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.269922] Call Trace: [ 316.272562] dump_stack+0x188/0x20d [ 316.276222] should_fail.cold+0xa/0x1b [ 316.280120] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 316.285235] ? __lock_is_held+0xad/0x140 [ 316.289318] __should_failslab+0x115/0x180 [ 316.293561] should_failslab+0x5/0xf [ 316.297279] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 316.301985] ? kasan_unpoison_shadow+0x30/0x40 [ 316.306573] ? kasan_kmalloc+0xbf/0xe0 [ 316.310470] __memcg_init_list_lru_node+0x7f/0x1e0 [ 316.315401] __list_lru_init+0x3ff/0x700 [ 316.319516] sget_userns+0x79f/0xcd0 [ 316.323244] ? get_anon_bdev+0xb0/0xb0 [ 316.327144] ? get_anon_bdev+0xb0/0xb0 [ 316.331039] sget+0x10d/0x150 [ 316.334157] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 316.339122] mount_nodev+0x2c/0x110 [ 316.342783] mount_fs+0xa3/0x30c [ 316.346207] vfs_kern_mount.part.0+0x68/0x400 [ 316.350708] do_mount+0x4f4/0x2a40 [ 316.354280] ? rcu_read_lock_sched_held+0x10a/0x130 [ 316.359449] ? copy_mount_string+0x40/0x40 [ 316.363692] ? __might_fault+0x192/0x1d0 [ 316.367757] ? _copy_from_user+0xd2/0x140 [ 316.371914] ? copy_mount_options+0x27a/0x390 [ 316.376416] ksys_mount+0xd7/0x150 [ 316.379976] __x64_sys_mount+0xba/0x150 [ 316.383983] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 316.388601] do_syscall_64+0xf9/0x620 [ 316.392414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.397608] RIP: 0033:0x45c849 [ 316.400827] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 316.419792] RSP: 002b:00007fe979567c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 316.427536] RAX: ffffffffffffffda RBX: 00007fe9795686d4 RCX: 000000000045c849 [ 316.434848] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 316.442130] RBP: 000000000076bfa0 R08: 0000000020000280 R09: 0000000000000000 12:34:18 executing program 0: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="14205546", @ANYRES16=0x0, @ANYBLOB="000000000000fc"], 0x3}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x8ac) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)={0x4, 0x2, 0x4, 0x8, 0x0, {0x77359400}, {0x3, 0x2, 0x2, 0xff, 0x80, 0x0, "38ee697c"}, 0x4, 0x4, @fd=r6, 0x1f, 0x0, r7}) fchdir(r3) creat(&(0x7f0000000100)='./bus\x00', 0x0) 12:34:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 316.449425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 316.456732] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000015 [ 316.516195] XFS (loop5): Invalid superblock magic number 12:34:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 316.632769] FAT-fs (loop0): Invalid FSINFO signature: 0x46552014, 0x00000000 (sector = 1) 12:34:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:19 executing program 3 (fault-call:10 fault-nth:22): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r2, 0x0, 0x360f) 12:34:19 executing program 0: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="14205546", @ANYRES16=0x0, @ANYBLOB="000000000000fc"], 0x3}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @loopback, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x8ac) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)={0x4, 0x2, 0x4, 0x8, 0x0, {0x77359400}, {0x3, 0x2, 0x2, 0xff, 0x80, 0x0, "38ee697c"}, 0x4, 0x4, @fd=r6, 0x1f, 0x0, r7}) fchdir(r3) creat(&(0x7f0000000100)='./bus\x00', 0x0) 12:34:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 317.046845] FAULT_INJECTION: forcing a failure. [ 317.046845] name failslab, interval 1, probability 0, space 0, times 0 [ 317.063355] FAT-fs (loop0): Invalid FSINFO signature: 0x46552014, 0x00000000 (sector = 1) [ 317.068952] CPU: 0 PID: 11829 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 317.079788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.089162] Call Trace: [ 317.091798] dump_stack+0x188/0x20d [ 317.095484] should_fail.cold+0xa/0x1b [ 317.099385] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 317.104493] ? __lock_is_held+0xad/0x140 [ 317.108570] __should_failslab+0x115/0x180 [ 317.112855] should_failslab+0x5/0xf [ 317.116579] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 317.121253] ? kasan_unpoison_shadow+0x30/0x40 [ 317.125874] ? kasan_kmalloc+0xbf/0xe0 [ 317.129814] __memcg_init_list_lru_node+0x7f/0x1e0 [ 317.134839] __list_lru_init+0x3ff/0x700 [ 317.138924] sget_userns+0x79f/0xcd0 [ 317.142650] ? get_anon_bdev+0xb0/0xb0 [ 317.146547] ? get_anon_bdev+0xb0/0xb0 [ 317.150459] sget+0x10d/0x150 [ 317.153594] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 317.158555] mount_nodev+0x2c/0x110 [ 317.162205] mount_fs+0xa3/0x30c [ 317.165596] vfs_kern_mount.part.0+0x68/0x400 [ 317.170120] do_mount+0x4f4/0x2a40 [ 317.173694] ? rcu_read_lock_sched_held+0x10a/0x130 [ 317.178729] ? copy_mount_string+0x40/0x40 [ 317.182979] ? __might_fault+0x192/0x1d0 [ 317.187053] ? _copy_from_user+0xd2/0x140 [ 317.191243] ? copy_mount_options+0x27a/0x390 [ 317.195767] ksys_mount+0xd7/0x150 [ 317.199318] __x64_sys_mount+0xba/0x150 [ 317.203295] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 317.207888] do_syscall_64+0xf9/0x620 [ 317.211706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.216913] RIP: 0033:0x45c849 [ 317.220104] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.239025] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 12:34:19 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 317.246728] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 317.254039] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 317.261305] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 317.268577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 317.275847] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000016 12:34:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 317.355762] XFS (loop5): Invalid superblock magic number 12:34:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 317.573599] FAT-fs (loop0): Invalid FSINFO signature: 0x46552014, 0x00000000 (sector = 1) 12:34:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:19 executing program 0: r0 = socket(0xf, 0x3, 0x3) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x5}}, 0x0) [ 317.771130] XFS (loop5): Invalid superblock magic number [ 317.812260] FAT-fs (loop0): Invalid FSINFO signature: 0x46552014, 0x00000000 (sector = 1) 12:34:20 executing program 3 (fault-call:10 fault-nth:23): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x118) r2 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getflags(r2, 0xb) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x401}, 0x20000080) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 318.122293] FAULT_INJECTION: forcing a failure. [ 318.122293] name failslab, interval 1, probability 0, space 0, times 0 [ 318.192159] XFS (loop5): Invalid superblock magic number [ 318.217167] CPU: 1 PID: 11917 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 318.225068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.234439] Call Trace: [ 318.237040] dump_stack+0x188/0x20d [ 318.240682] should_fail.cold+0xa/0x1b [ 318.244589] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 318.249712] ? __lock_is_held+0xad/0x140 [ 318.253803] __should_failslab+0x115/0x180 [ 318.258046] should_failslab+0x5/0xf [ 318.261777] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 318.266450] ? kasan_unpoison_shadow+0x30/0x40 [ 318.271075] ? kasan_kmalloc+0xbf/0xe0 [ 318.274977] __memcg_init_list_lru_node+0x7f/0x1e0 [ 318.279921] __list_lru_init+0x3ff/0x700 [ 318.283996] sget_userns+0x79f/0xcd0 [ 318.287721] ? get_anon_bdev+0xb0/0xb0 [ 318.291616] ? get_anon_bdev+0xb0/0xb0 [ 318.295516] sget+0x10d/0x150 [ 318.298628] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 318.303568] mount_nodev+0x2c/0x110 [ 318.307270] mount_fs+0xa3/0x30c [ 318.310646] vfs_kern_mount.part.0+0x68/0x400 [ 318.315175] do_mount+0x4f4/0x2a40 [ 318.318724] ? rcu_read_lock_sched_held+0x10a/0x130 [ 318.323781] ? copy_mount_string+0x40/0x40 [ 318.328032] ? __might_fault+0x192/0x1d0 [ 318.332121] ? _copy_from_user+0xd2/0x140 [ 318.336323] ? copy_mount_options+0x27a/0x390 12:34:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 318.340841] ksys_mount+0xd7/0x150 [ 318.344424] __x64_sys_mount+0xba/0x150 [ 318.348463] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 318.353055] do_syscall_64+0xf9/0x620 [ 318.356887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.362071] RIP: 0033:0x45c849 [ 318.365275] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.384212] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.391909] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 318.399188] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 318.406552] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 318.413848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 318.421114] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000017 12:34:20 executing program 3 (fault-call:10 fault-nth:24): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x9, 0x4) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={'nr0\x00', 0xffff, 0xf2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0)={0xfffffff8, 0x101, 0x1, 0x1, 0x2}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000756240aaf0924277ffb03a41acaa3eb2d774269cb06722707a6b0349085543566fa3ac763c10808d55cdc03a52775b7ddf64833b0a0e6ce29c1a9d8728b63a599a4b8232ab88cbeaa4f9faf4aedc4a7f436794211853632b26d0443edb32c60b0df41e5e78e4158b614f213c2c8b1d6e5081127aa829cbf3397c9dae95612affaa19a7dd61fbdd24f4", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x10, &(0x7f00000006c0)={r6}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200000, 0x0) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20}, 0x4040015) socket$inet6(0xa, 0x6, 0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x11) 12:34:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 318.664504] FAULT_INJECTION: forcing a failure. [ 318.664504] name failslab, interval 1, probability 0, space 0, times 0 [ 318.706943] CPU: 1 PID: 11944 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 318.715005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.724362] Call Trace: [ 318.727016] dump_stack+0x188/0x20d [ 318.730726] should_fail.cold+0xa/0x1b [ 318.734708] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 318.739875] ? __lock_is_held+0xad/0x140 [ 318.744003] __should_failslab+0x115/0x180 [ 318.748241] should_failslab+0x5/0xf [ 318.751985] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 318.756738] ? kasan_unpoison_shadow+0x30/0x40 [ 318.761364] ? kasan_kmalloc+0xbf/0xe0 [ 318.765257] __memcg_init_list_lru_node+0x7f/0x1e0 [ 318.770215] __list_lru_init+0x3ff/0x700 [ 318.774299] sget_userns+0x79f/0xcd0 [ 318.778028] ? get_anon_bdev+0xb0/0xb0 [ 318.781952] ? get_anon_bdev+0xb0/0xb0 [ 318.785843] sget+0x10d/0x150 [ 318.788968] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 318.793907] mount_nodev+0x2c/0x110 [ 318.797577] mount_fs+0xa3/0x30c [ 318.800966] vfs_kern_mount.part.0+0x68/0x400 [ 318.805475] do_mount+0x4f4/0x2a40 [ 318.809130] ? rcu_read_lock_sched_held+0x10a/0x130 [ 318.814160] ? copy_mount_string+0x40/0x40 [ 318.818408] ? __might_fault+0x192/0x1d0 [ 318.822481] ? _copy_from_user+0xd2/0x140 [ 318.826644] ? copy_mount_options+0x27a/0x390 [ 318.831154] ksys_mount+0xd7/0x150 [ 318.834712] __x64_sys_mount+0xba/0x150 [ 318.838744] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 318.843350] do_syscall_64+0xf9/0x620 [ 318.847171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.852397] RIP: 0033:0x45c849 12:34:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 318.855612] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.874528] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.882236] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 318.889520] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 318.896798] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 12:34:21 executing program 3 (fault-call:10 fault-nth:25): mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 318.904080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 318.911370] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000018 [ 319.008226] XFS (loop5): Invalid superblock magic number 12:34:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xd, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 319.247485] FAULT_INJECTION: forcing a failure. [ 319.247485] name failslab, interval 1, probability 0, space 0, times 0 [ 319.321270] CPU: 0 PID: 11994 Comm: syz-executor.3 Not tainted 4.19.111-syzkaller #0 [ 319.329181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.338558] Call Trace: [ 319.341157] dump_stack+0x188/0x20d [ 319.344812] should_fail.cold+0xa/0x1b [ 319.348724] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 319.353834] ? __lock_is_held+0xad/0x140 [ 319.357926] __should_failslab+0x115/0x180 [ 319.362190] should_failslab+0x5/0xf [ 319.365916] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 319.370620] ? kasan_unpoison_shadow+0x30/0x40 [ 319.375207] ? kasan_kmalloc+0xbf/0xe0 [ 319.379112] __memcg_init_list_lru_node+0x7f/0x1e0 [ 319.384066] __list_lru_init+0x3ff/0x700 [ 319.388171] sget_userns+0x79f/0xcd0 [ 319.391931] ? get_anon_bdev+0xb0/0xb0 [ 319.395855] ? get_anon_bdev+0xb0/0xb0 [ 319.399758] sget+0x10d/0x150 [ 319.402866] ? ovl_posix_acl_xattr_set+0x9a0/0x9a0 [ 319.407799] mount_nodev+0x2c/0x110 [ 319.411454] mount_fs+0xa3/0x30c [ 319.414837] vfs_kern_mount.part.0+0x68/0x400 [ 319.419513] do_mount+0x4f4/0x2a40 [ 319.423076] ? rcu_read_lock_sched_held+0x10a/0x130 [ 319.428103] ? copy_mount_string+0x40/0x40 [ 319.432353] ? __might_fault+0x192/0x1d0 [ 319.436462] ? _copy_from_user+0xd2/0x140 [ 319.440665] ? copy_mount_options+0x27a/0x390 [ 319.445210] ksys_mount+0xd7/0x150 [ 319.448762] __x64_sys_mount+0xba/0x150 [ 319.452789] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 319.457389] do_syscall_64+0xf9/0x620 [ 319.461203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.466408] RIP: 0033:0x45c849 [ 319.469638] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.488561] RSP: 002b:00007fe979588c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.496283] RAX: ffffffffffffffda RBX: 00007fe9795896d4 RCX: 000000000045c849 [ 319.503574] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002 [ 319.510841] RBP: 000000000076bf00 R08: 0000000020000280 R09: 0000000000000000 [ 319.518184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 319.525461] R13: 0000000000000754 R14: 00000000004ca107 R15: 0000000000000019 [ 319.591180] XFS (loop5): Invalid superblock magic number 12:34:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f13000)={0xa, 0x4e02}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r3, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r4, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r5, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r6, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r7, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r8, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r9, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r10, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 12:34:21 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x24, 0x0, @opaque="c9a6ae216e66d9df073f0b6f3281d79c0fda4800033141645a95f241"}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() tkill(r1, 0x1000000000016) r2 = gettid() tkill(r2, 0x1000000000016) tgkill(r1, r2, 0x12) dup(r0) r3 = getpgrp(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x3, 0x3, 0x2, r3}) 12:34:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xe, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 319.770519] audit: type=1400 audit(1584621261.847:95): avc: denied { sys_ptrace } for pid=11963 comm="ps" capability=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 12:34:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000000)='./file1\x00', 0x4000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="58465342000010000300000000001000000000000000000000000000131de6353c257c70e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x29e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000000c0)=0x401) 12:34:22 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 320.047301] XFS (loop5): Invalid superblock magic number 12:34:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xf, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 320.114971] XFS (loop4): SB sanity check failed [ 320.123636] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 320.165075] XFS (loop4): Unmount and run xfs_repair [ 320.178681] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 320.187793] 000000002a228975: 58 46 53 42 00 00 10 00 03 00 00 00 00 00 10 00 XFSB............ [ 320.209947] 0000000048ee203f: 00 00 00 00 00 00 00 00 00 00 00 00 13 1d e6 35 ...............5 [ 320.239150] 00000000ca94f896: 3c 25 7c 70 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 <%|p..H..&...O\. [ 320.258369] 00000000c4a24728: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 320.279217] 00000000cca901cb: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a ....@........... [ 320.296132] 000000000181732a: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 320.325550] 00000000540bd319: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00 ...Z.$.......... [ 320.334780] 000000008cd549ff: 00 00 00 00 00 ec 00 00 0c 09 0a 02 0c 00 00 00 ................ [ 320.344742] XFS (loop4): SB validate failed with error -117. 12:34:22 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400003, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 320.468736] XFS (loop5): Invalid superblock magic number 12:34:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x16, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 320.727161] XFS (loop5): Invalid superblock magic number [ 320.755780] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x515100, 0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}, 0x88) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0xd8, 0x0, 0xd8, 0x0, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x30}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 12:34:24 executing program 4: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="3323e06a0430c85eaf8bb5abd53ed1dba028f49228f8da1b191bdcbb7849bb46ba338e317785c308283d51373c9dee57eaa70a3d9fa444a2ae87e2d6b484cf6d099567212c9f45ee88bc7637dc18a3f7b14dc47ca018af5e3bed2b28820cdd07c32e4074", 0x64) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r4) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 12:34:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:24 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400004, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x22, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x515100, 0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}, 0x88) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0xd8, 0x0, 0xd8, 0x0, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x30}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 322.795234] xt_ecn: cannot match TCP bits for non-tcp packets 12:34:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049a23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x4305}, @void, @eth={@empty, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "738a4f", 0x16d, 0x21, 0x7f, @empty, @local, {[@fragment={0x3a, 0x0, 0x5, 0x0, 0x0, 0x8, 0x67}, @fragment={0x11, 0x0, 0x3, 0x0, 0x0, 0x10, 0x68}, @routing={0x89, 0x2, 0x2, 0xff, 0x0, [@remote]}, @srh={0x4, 0x2, 0x4, 0x1, 0x40, 0x40, 0x5, [@mcast1]}, @dstopts={0x2b, 0xd, [], [@jumbo={0xc2, 0x4, 0x81}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x48, {0x0, 0x10, 0x4, 0x2, [0x7fff, 0x20, 0x2, 0x8, 0x1, 0xfffffffffffffff9, 0x6, 0x2]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @pad1]}, @dstopts={0x1, 0x0, [], [@jumbo={0xc2, 0x4, 0xf68}]}, @hopopts={0x3a, 0x6, [], [@jumbo={0xc2, 0x4, 0x3f}, @ra={0x5, 0x2, 0x8}, @pad1, @generic={0x1}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @rand_addr="33ffad707fca5145f78114ba8f2b0ddc"}, @hao={0xc9, 0x10, @mcast2}]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x3, 0x0, 0x0, 0x5, 0x7, "c30d7f", 0x5, "d9205e"}, "68ddd93b6aa8712644ed531c5edce978214a12f436f83967b584d7ff361f65aa98e45877ce425463b20859a3dc0d26d249c079c961d26c9f67a670863bfc01c5cfa1b4a7d18777cc5c7c3541fc171b40cd7951480d"}}}}}}}, 0x1ab) [ 322.875570] XFS (loop5): Invalid superblock magic number [ 322.884511] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x0, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:25 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400005, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x23, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 323.005121] xt_ecn: cannot match TCP bits for non-tcp packets [ 323.182523] XFS (loop5): Invalid superblock magic number 12:34:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7f, 0xd0900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}}, 0x4, 0x5, 0x1f, 0x7, 0xc2, 0x1000, 0x79}, 0x9c) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000280)={0x6, "c40664b671fe754c1094a3ac120573fadbd49cad00", 0x3, 0x68, 0x3, 0x0, 0x2}) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) fanotify_init(0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x478042, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="ffd9030000005b7213f6012e669070983f00d7529ce3a9eb0700930100006f93bc4c83045cd5c32cfd7a8ac75f8100a77b4db77b74412c"], 0x37) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25180000000c0099020000400000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004800) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 12:34:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x0, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 323.322361] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.334651] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 323.378442] netlink: 40419 bytes leftover after parsing attributes in process `syz-executor.4'. 12:34:25 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400006, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x0, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000400), 0x4}, 0x200000008, 0x47ffffffc, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x8ce67fc4149fab68, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe80, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR64], @ANYRES32=r0]}, 0x1, 0x0, 0x0, 0x4000}, 0x2040050) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', r4}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000180)={0x2, 0x398, 0x3, 0x6, 0x2, [0x6, 0x9, 0x80000001, 0x5eb], [0xd28, 0xf2, 0x46, 0xffffffe7], [0x2, 0x23, 0x0, 0x803], [0x8, 0x3f, 0x8]}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)='dax\x00', 0x0, &(0x7f0000000340)='\x12\xfa\xb2\x7f\xe6s\x06(\x19\xe5A\xad\x8d\x01\xb0\x05\xf4\a\xa3\'2,\x8f\x87\xeck\xec\x9a\'\xe5W\xa2u\xa9\x16\x00\x8c\xb5\xbb\xfa\f\x89{B\xc7\xf9\xf2\x8e\xbd\x81\xf6\xda\x12\x8c\x01pA\x97\'\'$\xac\x97~\x99\x04\xe3\x06s\xbc@\xd6\x85\x86\x06\xe8~\xbdR\xf3\xaf\xf8\x964\x12\t2\x914\x04\xd0B\x85\"\x1c\xe0g\xb8\x9a\x9d\x8c,P\xa3\xcf\xbf\x8b\x85l\xd8\x94G') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000100)=0x3ff) 12:34:25 executing program 0: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x50, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x1, 0x200}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_dev$sg(0x0, 0x9, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) dup(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r4, 0x80006) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 323.630072] audit: type=1804 audit(1584621265.707:96): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir481949119/syzkaller.wKXQ04/88/file0/file0" dev="ramfs" ino=44112 res=1 [ 323.698476] XFS (loop5): Invalid superblock magic number 12:34:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x0, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 323.741131] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:25 executing program 4: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket(0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x8}, @in6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, [], 0x36}, 0xfff}, @in={0x2, 0x4e20, @rand_addr=0x4}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @empty}], 0x68) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000500)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x1, [0xfff]}, &(0x7f0000000280)=0x6) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000140)='selfem0\x00'], &(0x7f0000000440), 0x100) r2 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 12:34:25 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400007, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x36, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x0, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:26 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000000845caad5f26353b3f43324851d7cb15bc65446e344bf282ab690bed3f27e0e6e2c091accb0ebc30382872727b513a", @ANYBLOB="b872e342ff0d047a2385579a2d8b8a07000000000000009d82604a7babdb0e4b95a4193459df724438cea75707d8a0109bed54d0a7cca8f462e8f21e9838d3f4ca5d3119780700000029e6df6eca4e20cda8229322267563425f0f031b2177aad82a7d4a7d8869557fe4fd257a994949a0ab21423c563b381b534a624f4b3e9d359ec75288942bd3965f73c6ea3fe0d1ee1dafe07990e3657723435f90756c32f7f01b214eab9c165ea47508a15a186438a1e3328dc84e012b280223d12091ce2a16f8d2834ad4b18591"], 0x4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'hsr0\x00', r5}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x420000, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x99) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300), 0x12) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x84, 0x0, 0x1}, 0x3c) [ 324.144634] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:26 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400008, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x0, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 324.309483] audit: type=1400 audit(1584621266.387:97): avc: denied { map } for pid=12267 comm="syz-executor.4" path="/dev/nullb0" dev="devtmpfs" ino=318 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 [ 324.359848] XFS (loop5): Invalid superblock magic number 12:34:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x69, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x0, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 324.638746] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 324.737052] XFS (loop5): Invalid superblock magic number 12:34:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:27 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400009, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:27 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x0, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xbc, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 325.357126] XFS (loop5): Invalid superblock magic number 12:34:27 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x0, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 325.408795] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 326.073428] syz-executor.4 (12270) used greatest stack depth: 22064 bytes left 12:34:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xc4, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:28 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40000a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_ENDIAN(0x14, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07010000064900000000000000000000000000000000100008000000000000000529"], 0x22) pipe(&(0x7f00000001c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x800408}, 0xc) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:34:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @sack_perm, @timestamp, @mss={0x2, 0x3fd}], 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000010000000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xfe28, 0x400}], 0x4802, 0x0) 12:34:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 326.360721] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:28 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40000b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 326.469224] XFS (loop5): Invalid superblock magic number 12:34:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 326.560662] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.590603] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem 12:34:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x180, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 326.611365] EXT4-fs (loop0): fragment/cluster size (2048) != block size (1024) 12:34:28 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40000c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 326.707978] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 326.710320] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.740137] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 326.753810] EXT4-fs (loop0): fragment/cluster size (2048) != block size (1024) [ 326.865502] XFS (loop5): Invalid superblock magic number [ 327.065664] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c696e6465783d6f6e2c6d657461636f70793d6f66662c6c677765726469723d2e2f66696c65302c78696e6f3d6f66662c6e66735f6578706f72743d6f66662c6e661f79d866c9c8ddd3faaa0a554a0d9d33735f6578704f72743d6f6e2c696e6465783d6f4e2c6f626a5f726f6c653d6e66735f6578706f72743d6f66662c736d61636b66736861743d2f6465692f6b766d002c646566636f6e746578743d81493e2431404307cbbe973c5aa6960609091a8b43c5222fc04f5782de92b58d2120fe2c57603615b8cfdec0617f8b7de6af321f618c15c9c9e518c755e5d3cae3b319da", @ANYRESDEC, @ANYBLOB="2c61707072616973652c00f1a70111a8eb5e51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab773b468c941bc482bc81037b3aef2ba6b0f2749024a4c8a9780001b187ccbe94ce6438299eab8922c8b8b35b82917b22cdae7939f46197378ac610e08dbf04915ac001efb8c188f768c01000000000000402f93748c71a1093ae15324494aec28f9a7f15342d2ed2339050a1a9867fd62bdbbfa7f3a4cd3e30624e5d1ea8ccae2204613dde6613eb3a7709e55af4ee4aedd9c206bfbf9db39ff8d4bc635cd4f75013c"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2}}, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "e8b1909c0d7078a2", "399861785f484e540e01916fd1f7371e", "82e07179", "ec41166ac3ace396"}, 0x28) splice(r3, 0x0, r4, 0x0, 0x100000000, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x10100) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 12:34:29 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40000d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vga_arbiter\x00', 0x4400, 0x0) getpeername$llc(r2, &(0x7f0000000940)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000980)=0x10) dup(r1) r3 = fcntl$dupfd(r1, 0x0, r0) sendto$inet6(r3, &(0x7f0000000000)="9000000043001fb2b9409ac00aff030002a578020d0001000800ac4a0d13ca54a3e5a2de0e6b06f70900ac27a6c50805168481f7b9e038b688ea2877b0680000000000000008d6896a51e73bd789293170b3006466fcb78dcaaf6c3efed4fb0ebd1ef5b669766436c0c80cefd285d60d280286c9d2896c6d3b1a08000000000000009e4fa65206412628ae97be23cd36", 0x90, 0x810, 0x0, 0x0) 12:34:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) 12:34:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1ea, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 327.209527] audit: type=1400 audit(1584621269.287:98): avc: denied { map } for pid=12429 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=44439 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 12:34:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:29 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_route(0x10, 0x3, 0x0) 12:34:29 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="0201a5ffffff0a000000ff45ac0000ffffff8200080000000000000000400000000005000000e100000088770072003007000f00000000000000008000da55aa", 0x40, 0x1c0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x17c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x85}, 0x10) [ 327.442246] XFS (loop5): Invalid superblock magic number [ 327.472329] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1fc, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:29 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40000f, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0x0, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 327.648272] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 327.684770] loop0: partition table partially beyond EOD, truncated [ 327.723777] loop0: p1 start 10 is beyond EOD, truncated [ 327.766584] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 327.791459] loop0: p3 start 225 is beyond EOD, truncated [ 327.811210] loop0: p4 size 2 extends beyond EOD, truncated [ 327.818579] XFS (loop5): Invalid superblock magic number [ 327.818637] loop0: p5 start 10 is beyond EOD, truncated [ 327.830176] loop0: p6 size 1073741824 extends beyond EOD, truncated 12:34:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0x0, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 328.084880] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:30 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400010, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x203, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 328.141506] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 328.146067] loop0: partition table partially beyond EOD, truncated [ 328.186808] loop0: p1 start 10 is beyond EOD, truncated [ 328.211618] loop0: p2 size 1073741824 extends beyond EOD, truncated 12:34:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0x0, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 328.286193] loop0: p3 start 225 is beyond EOD, truncated [ 328.298190] loop0: p4 size 2 extends beyond EOD, truncated [ 328.317635] loop0: p5 start 10 is beyond EOD, truncated [ 328.326447] XFS (loop5): Invalid superblock magic number [ 328.329872] loop0: p6 size 1073741824 extends beyond EOD, truncated 12:34:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x0, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x280, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_route(0x10, 0x3, 0x0) 12:34:30 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400014, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 328.449003] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 328.748807] XFS (loop5): Invalid superblock magic number 12:34:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x0, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:31 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 329.130445] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x0, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:31 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400025, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 329.344456] XFS (loop5): Invalid superblock magic number 12:34:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x302, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) [ 329.764281] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:32 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x4000c8, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 329.938606] XFS (loop5): Invalid superblock magic number 12:34:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_route(0x10, 0x3, 0x0) 12:34:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4e00000004000000000000000000000002000000005b67cac630f9b33d3c00000006000000000000002500000000b3e50bcb7228a03a09c00c6d8d00007d747275737465642f275d2d21d17d657468302e757365726b657972"], 0x55) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='fuseblk\x00', 0x2002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20, 0x0, @dev={0xfe, 0x80, [], 0x2f}}, 0x1c) listen(r1, 0x400000001ffffffd) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) socket$netlink(0x10, 0x3, 0x12) 12:34:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x344, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:32 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 330.169922] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:32 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x4002bc, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 330.469752] XFS (loop5): Invalid superblock magic number 12:34:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x301000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x0) 12:34:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x380, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 330.592914] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:32 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40042a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 330.826931] XFS (loop5): Invalid superblock magic number 12:34:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000100)={0x7, @raw_data="76520bfb634a94d40b8840997ef73cbd16d5085b1adef1b46ce43450edb652b353cdc1e758a141db321552e12327199fcf8248036b49a9db98276f19412e5d4878ebce248d24e2592f9d4d52d4877825c4ddec45db3a8be38142d34250aa420131d4b614b6292ca3fec787337bd467ae141f568228f9a8b6906bdaa04c3d4a32dbc88a4810fd081f01d72625644ceaed197eba76b425eb6858088725767e6c7a383a130fd5e31a946e42c5c0b0a5dcff341151b83e6862136610e6cdd791206c2caecacec04822a0"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCCONS(r2, 0x541d) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r0, 0x0) 12:34:33 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_route(0x10, 0x3, 0x0) 12:34:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r5, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:33 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c911e6d964a03e614de2ad7df407359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957080000000000000023340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc430800d1dcbbf8cc6f9b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) [ 331.295476] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3f9, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@attr2='attr2'}]}) 12:34:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000100)={0x7, @raw_data="76520bfb634a94d40b8840997ef73cbd16d5085b1adef1b46ce43450edb652b353cdc1e758a141db321552e12327199fcf8248036b49a9db98276f19412e5d4878ebce248d24e2592f9d4d52d4877825c4ddec45db3a8be38142d34250aa420131d4b614b6292ca3fec787337bd467ae141f568228f9a8b6906bdaa04c3d4a32dbc88a4810fd081f01d72625644ceaed197eba76b425eb6858088725767e6c7a383a130fd5e31a946e42c5c0b0a5dcff341151b83e6862136610e6cdd791206c2caecacec04822a0"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCCONS(r2, 0x541d) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r0, 0x0) 12:34:33 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40042b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) 12:34:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x20, 0x3, r3, 0x0, &(0x7f0000000000)={0xa30001, 0x5, [], @value=0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$binfmt_misc(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="73797a3093298311e7176d3c1c17c47da4b37067438ec3b10519844c69550b892ed143f76f228ac9adf70b79b8b8e62fae4e02d3f5af1e4cf96b47902af0771a1af6b922487f2f52dea9a0280003b7e2cd47d860b13d46af1954"], 0x5a) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0001000000f83bb4b365fa100300000000000000f2fb3cae2fb3805eb101659d0e4feea0e298c3d1097897bf5d09305dc6be1129b8df087a761d18e7cb03d849999d06d689bcd9b5e4e884e2ecc88d5d000022a847b36afaf864822ae9d61225df9b854d57f24e9d4e8505e93bc17872b9e5f492c0893f16ba814b4cd60ea2944a8708e0e94ee14577589704634824958c9d24453e870964f5d56ebe7ae3611133e79818e84c3d5878fe6d95a4d69e5be07da9e762d8c612ed6f453a3e75cbb3f5b539d38ed55f97ff3aaec353b5ea56f6c5328aae845addc637094e49", @ANYRES16=r6, @ANYRESDEC], 0x3}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) [ 331.739460] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:34:33 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r2 = socket(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x40042c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 12:34:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x14f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8}, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x8, 0xb, 0x4, 0x24040100, 0xff, {0x77359400}, {0x2, 0x0, 0x5, 0x1, 0x3, 0x4, "cf5776d6"}, 0x80000000, 0x2, @userptr=0x1000, 0x3, 0x0, r1}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x11, 0x800000003, 0x81) bind(r6, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000180)={0x4, "279bb9f9492d09b705bb80cd259f8842a7755f2c7dcf85cefebed1de9338a804", 0x2}) ftruncate(r7, 0x2008002) sendfile(r5, r7, 0x0, 0x200fff) [ 331.842904] XFS (loop5): Invalid superblock magic number [ 332.023447] ================================================================== [ 332.031181] BUG: KASAN: use-after-free in __list_add_valid+0x93/0xa0 [ 332.037733] Read of size 8 at addr ffff88805293a4a0 by task syz-executor.0/12767 [ 332.045322] [ 332.046983] CPU: 0 PID: 12767 Comm: syz-executor.0 Not tainted 4.19.111-syzkaller #0 [ 332.054873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.064252] Call Trace: [ 332.066869] dump_stack+0x188/0x20d [ 332.070519] ? __list_add_valid+0x93/0xa0 [ 332.074678] print_address_description.cold+0x7c/0x212 [ 332.079986] ? __list_add_valid+0x93/0xa0 [ 332.084184] kasan_report.cold+0x88/0x2b9 [ 332.088485] __list_add_valid+0x93/0xa0 [ 332.092571] rdma_listen+0x609/0x880 [ 332.096333] ucma_listen+0x14d/0x1c0 [ 332.100052] ? ucma_notify+0x190/0x190 [ 332.103943] ? __might_fault+0x192/0x1d0 [ 332.108024] ? _copy_from_user+0xd2/0x140 [ 332.112215] ? ucma_notify+0x190/0x190 [ 332.116127] ucma_write+0x285/0x350 [ 332.119794] ? ucma_open+0x280/0x280 [ 332.123530] ? __fget+0x319/0x510 [ 332.127016] __vfs_write+0xf7/0x760 [ 332.130638] ? ucma_open+0x280/0x280 [ 332.134345] ? kernel_read+0x110/0x110 [ 332.138230] ? __inode_security_revalidate+0xd3/0x120 [ 332.143453] ? avc_policy_seqno+0x9/0x70 [ 332.147530] ? selinux_file_permission+0x87/0x520 [ 332.152379] ? security_file_permission+0x84/0x220 [ 332.157311] vfs_write+0x206/0x550 [ 332.160871] ksys_write+0x12b/0x2a0 [ 332.164546] ? __ia32_sys_read+0xb0/0xb0 [ 332.168680] ? __ia32_sys_clock_settime+0x260/0x260 [ 332.173739] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 332.178506] ? trace_hardirqs_off_caller+0x55/0x210 [ 332.183531] ? do_syscall_64+0x21/0x620 [ 332.187631] do_syscall_64+0xf9/0x620 [ 332.191468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.196657] RIP: 0033:0x45c849 [ 332.199860] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.218768] RSP: 002b:00007fdf81921c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.226479] RAX: ffffffffffffffda RBX: 00007fdf819226d4 RCX: 000000000045c849 [ 332.233759] RDX: 0000000000000010 RSI: 0000000020000980 RDI: 0000000000000005 [ 332.241025] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 332.248290] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 332.255569] R13: 0000000000000cc0 R14: 00000000004cee66 R15: 000000000076bf0c [ 332.262844] [ 332.264482] Allocated by task 12443: [ 332.268191] kasan_kmalloc+0xbf/0xe0 [ 332.271991] __kmalloc_node+0x4c/0x70 [ 332.275790] qdisc_alloc+0xb6/0xa40 [ 332.279415] qdisc_create_dflt+0x70/0x1d0 [ 332.283559] mq_init+0x363/0x4b0 [ 332.286940] qdisc_create_dflt+0xff/0x1d0 [ 332.291088] dev_activate+0x8c1/0xb30 [ 332.294918] __dev_open+0x265/0x390 [ 332.298586] __dev_change_flags+0x4dd/0x620 [ 332.302927] dev_change_flags+0x7e/0x140 [ 332.307017] dev_ifsioc+0x286/0x8d0 [ 332.310659] dev_ioctl+0x1ab/0xc58 [ 332.314230] sock_do_ioctl+0x1b7/0x2f0 [ 332.318116] sock_ioctl+0x325/0x610 [ 332.321739] do_vfs_ioctl+0xcda/0x12e0 [ 332.325623] ksys_ioctl+0x9b/0xc0 [ 332.329070] __x64_sys_ioctl+0x6f/0xb0 [ 332.332958] do_syscall_64+0xf9/0x620 [ 332.336797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.341989] [ 332.343609] Freed by task 12441: [ 332.346986] __kasan_slab_free+0xf7/0x140 [ 332.351128] kfree+0xce/0x220 [ 332.354262] qdisc_destroy+0x4aa/0x6b0 [ 332.358147] dev_shutdown+0x11e/0x47a [ 332.361952] rollback_registered_many+0x64a/0xc40 [ 332.366804] rollback_registered+0xf2/0x1c0 [ 332.371136] unregister_netdevice_queue+0x1d7/0x2b0 [ 332.376245] __tun_detach+0xd86/0x1020 [ 332.380129] tun_chr_close+0xd9/0x180 [ 332.383935] __fput+0x2cd/0x890 [ 332.387228] task_work_run+0x13f/0x1b0 [ 332.391110] exit_to_usermode_loop+0x25a/0x2b0 [ 332.395709] do_syscall_64+0x538/0x620 [ 332.399594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.404771] [ 332.406396] The buggy address belongs to the object at ffff88805293a2c0 [ 332.406396] which belongs to the cache kmalloc-2048 of size 2048 [ 332.419238] The buggy address is located 480 bytes inside of [ 332.419238] 2048-byte region [ffff88805293a2c0, ffff88805293aac0) [ 332.431190] The buggy address belongs to the page: [ 332.436124] page:ffffea00014a4e80 count:1 mapcount:0 mapping:ffff88812c3dcc40 index:0x0 compound_mapcount: 0 [ 332.446080] flags: 0xfffe0000008100(slab|head) [ 332.450691] raw: 00fffe0000008100 ffffea00014a9388 ffffea0002264108 ffff88812c3dcc40 [ 332.458579] raw: 0000000000000000 ffff88805293a2c0 0000000100000003 0000000000000000 [ 332.466451] page dumped because: kasan: bad access detected [ 332.472147] [ 332.473760] Memory state around the buggy address: [ 332.478703] ffff88805293a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.486075] ffff88805293a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.493426] >ffff88805293a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.500768] ^ [ 332.505179] ffff88805293a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.512530] ffff88805293a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.519873] ================================================================== [ 332.527224] Disabling lock debugging due to kernel taint [ 332.532889] Kernel panic - not syncing: panic_on_warn set ... [ 332.532889] [ 332.540285] CPU: 0 PID: 12767 Comm: syz-executor.0 Tainted: G B 4.19.111-syzkaller #0 [ 332.549857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.559204] Call Trace: [ 332.561792] dump_stack+0x188/0x20d [ 332.565435] panic+0x26a/0x50e [ 332.568633] ? __warn_printk+0xf3/0xf3 [ 332.572535] ? retint_kernel+0x2d/0x2d [ 332.576435] ? trace_hardirqs_on+0x55/0x210 [ 332.580767] ? __list_add_valid+0x93/0xa0 [ 332.584939] kasan_end_report+0x43/0x49 [ 332.588926] kasan_report.cold+0xa4/0x2b9 [ 332.593101] __list_add_valid+0x93/0xa0 [ 332.597086] rdma_listen+0x609/0x880 [ 332.600822] ucma_listen+0x14d/0x1c0 [ 332.604573] ? ucma_notify+0x190/0x190 [ 332.608481] ? __might_fault+0x192/0x1d0 [ 332.612568] ? _copy_from_user+0xd2/0x140 [ 332.616733] ? ucma_notify+0x190/0x190 [ 332.620650] ucma_write+0x285/0x350 [ 332.624283] ? ucma_open+0x280/0x280 [ 332.628004] ? __fget+0x319/0x510 [ 332.631481] __vfs_write+0xf7/0x760 [ 332.635109] ? ucma_open+0x280/0x280 [ 332.638813] ? kernel_read+0x110/0x110 [ 332.642687] ? __inode_security_revalidate+0xd3/0x120 [ 332.647858] ? avc_policy_seqno+0x9/0x70 [ 332.651909] ? selinux_file_permission+0x87/0x520 [ 332.656745] ? security_file_permission+0x84/0x220 [ 332.661671] vfs_write+0x206/0x550 [ 332.665237] ksys_write+0x12b/0x2a0 [ 332.668893] ? __ia32_sys_read+0xb0/0xb0 [ 332.672979] ? __ia32_sys_clock_settime+0x260/0x260 [ 332.677986] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 332.682723] ? trace_hardirqs_off_caller+0x55/0x210 [ 332.687739] ? do_syscall_64+0x21/0x620 [ 332.691703] do_syscall_64+0xf9/0x620 [ 332.695498] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.700675] RIP: 0033:0x45c849 [ 332.703864] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.722774] RSP: 002b:00007fdf81921c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.730495] RAX: ffffffffffffffda RBX: 00007fdf819226d4 RCX: 000000000045c849 [ 332.737753] RDX: 0000000000000010 RSI: 0000000020000980 RDI: 0000000000000005 [ 332.745005] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 332.752266] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 332.759523] R13: 0000000000000cc0 R14: 00000000004cee66 R15: 000000000076bf0c [ 332.767871] Kernel Offset: disabled [ 332.771493] Rebooting in 86400 seconds..