0de05c5e17d55b1067130a0479083b91abd1711cf46a48fd3e0974061b3e52d68ff0c56287be049000b5d3bd2c9b22268bf58a13170f11f472734a5c438055246aa6bb32d6a0ebd2e9cd301aa3eee53cf085173bf3a3aa4ceb1c3e256f3469f61de14a80ff24c0acda47fb9cf95f917843452fa65e51ad2c4bf8dd48ea06df0550a06e33d7e2ce11124e6d44f6dc8a322f1802d8a16280b3ae5f7ecfa545a23824debc17a27ce798dabbbc71e40f2ab2ec3a49712f2130910bad7fdcbe8afecbc6ca8fdb5d8d7e854da679630049c60c5f061832fcd93d4c3e7ed6cbeb6912e9a63e4194b1b4714d26a45218b84f3ccb62e3af8c27e54bccdfe00ce94d431507b8f9e351a3b726994ac418df90dcbcef0aa439a09861838e49bc1e3776b13b8c70f7af9463df18d41e6cdf4c51e1a0a4d1a7a1307265d248846391a4dde6c1ea449ce683ff56fe83f53ab2a1ecb1297cc74ff3f6a20fabda1d8588760be5fb07b04d3e24d0163451f35c782e12e048555b327a1b3f5361a6967e9928e764b8951b296466bb841a8474bfad49b9e7114838ed14ea39b1945b93f08b6c0fac0e7e1320849ab40f11911332eed1794e142bf97058508d9549488cb916fbb1b964cf52ec91cd31f6427377f73613cccd3769e1c4ab17d95d01ea24848575d38e75ab968d292dc570841151d9274a7906bd08c76570c52f5ade73f4e4c5b5bac0b0495c07011ddb14ea5b1c443312c7d0f3ba8e7a6726f6f9df0db39408185e9b5bfe87605a6630ded0817b3070ed00be40b054ac6751ccaa80d6ece4f8f00630955591ed9eeb8d87a7e2240dd368d30c3631a749f0fb44bb40c3e2ff74dccc0834275d13ae0bdbfd1012ed2789f18e478796d9215a229f1903625b7752935c65b6c85610a501c933e3725c7a3bc5c4199b348a953c8b65cd789cf7bf1be0ca0f1b7bfef42feb8b15848e28d40b2f4af4e8fef33a5c884e6e4c0cbd41684e05e344321d43f147755e4213808846004b4331b8047292e02edf229e7c4530201aabd2881a500882faa77e242891c97c526db0a4c39955ca8046243260c0a8dc802b3ed1e7737d133206f3b93fa166b9c4d583ac83a578304f1bb5f6088c20e19db69cca750e55c4a4758f2cb42d07186214a7aaf4af93573f7e1b0f0041fc5c4613a7f6fea64119064de7a77b3efda13f42fbf8494179c6c0d94477c220f720bbf803ff2b9a9ba4a26b548b880bdf15b978f74ecb96c4467d6f8b69cefb5ef0b2b9c3f89e88c5be01b7ed21df3ac3a4750d1a887ff7411767ab7c77e5fe1f09ac85f3dfd171293bd264416dd7ba60f891e37bd2cbe2fad1eb36ffa203b15a1715460c994c216f3c9e72b04f59256f8b2e4e389f64875f20aae6f4d88229a13d7503e85cd168e94e644963975e198efa072bf40b752f3a32349ef31224a3fdd92850ebd3c5483419d9a1d737754f92121aa45738424fd40ab87b5f8062469d287329a4d6891572ba26919f2ded3e9fedbec5208e9f20263f11b65fa3a13992ea96e7c03e282dcd58c7c38f6ce8378c7563031c6f5c6f6b6073e4b1ec9c40f4a871ef8c580f4a6f44dbbb2460cc0533cef1bfa2827992c1929e8179082f90142da105777eaf25fd05155df0f6aa4fe85fbef37a28a4f5da9268828eca06c83ad9d51a52bc760ee2de9f1f9da085b966f215e2c7ab29c27c6de72338346d5c972d00d61ad8f669fec6df0b59ecc98da2d85e9cece5ba9653fe45a1e51bc6bbc8cbf0e5169eb0199928648e595142cdef7547004872f21de44f0bece66b4669fa590912a7e2ffa50ac557c91d2be63fd348de015fef1e21d0827815be9488dd9da7f56ed6647c43975968fa8ee008b856e87ba4d1a9492bf5a19959200b732d6eba89815d3ade97a320d69fea88457ab5e558578c83d78df84daefbf5f03d81040ca0a1d4f3e2d972ad77779df18e02fab98df58c000d777aae5091b12cfcecf6d1758e7a2790cf5776081dae3d3536a8864248b07c1e428d2c73206cf148a69c2e6356fa68dee60ee0d0402a0a08f4796a1cd1129bfdefc5b3a7e3976fd17cda12ea29d1e345c5672ed94bbeb0404c6240a5f814e66fcaa06c265a7518e8188e659222857b6e805455a632c3b4568a504dc90b7d8695f12100c3e1063f5f61d78c0b4ae019e41b59c6b35d5abe25a7629c4c84f563c5ea76f60c576b10dd3046e88edaaa9c107d5e6f05386517b9e858cbe63dfe4afbcb7432306dd31109b9e5dbfc53f1b312326a69eafce07e15022775e68d9cd26a08d9d7bfd9a20f3c3353de46443b51dc0b97c1ff86237b4fdf932eb0f7da2733b6e42b28c6f7f0382b2b7de322dc15258031a13fefbf9e6b9cdab5a6a60d0947b70e792c67c14f76d8114f6e0286d899db9b44f0029d4528c51c0f218fc656c84a4682c5922cc64b0daceb59a93911e66d34a17edc445365153bdbc29cac4b86075805a05253de50546a03561d76c40c6ccfc5ca17511f58c0784d690c5b3a614912bce8350cda7c815435582bc7e39588dfc01051918bf8c653ed6ec2e619ec608940e9eb91b80abcd47362675debcdb4b14601563424ae8018a5756bc06532747ba410ea442bc382b449a10cdcae5484e3e8c099cf15def92f3cec34c6e3d106716646c15836e81f5b20988e609c7774de31a0ccf5884f0f7c21ef96234973bc9e1fd7ae1aac48dd77988d875c567adb004d25a7b6f0a88f039712c4dc25311b21cb0a5ffb22cbda47643703e0eba0fad7d50916e006ba2cbd7996ea965e5682294a30e5f2cac63cd1bca10683a9204ae7cdfa5383bac945b73ae0d5b93699610b8533200941406bf6b15a4cc44d1add7d60234e8f8914f8eaac5c06899506899942e6271899b5f4fedb9453752a107029e30d023f05cee5eb61166ac7c5c35b3c77b3a7b16308d2d94e0730b62bdf538f528c98abd1f47d0d7a6b874dbdb67e20e7a0866f1c3d3ce5aac80ad72ee586ca11d6e4ae9ab623c07d551e8372af8585b7c9c6d91e87b6752a77dc5ebb0f2acd34c3918f7dee5aaba7a58df23686ee7ada890bedc2c885e7fb0c8a3233c6d21b93484cb5d494a1a96dc68bc24821ef0d40aaf8c8c0aa9e5affeb1477ee579b750cb7eade0024f3403de1d3d64af48ad287aebb261c4a0e0b03bdc23c7269fe4418c06451329a695b82a48b3db76014761094e253bbd5f4b3aa6dbcfadeb6cb123b74e2ce74de1b119d6767461bf41946a9d7f48df651264848aed2df1370a1de8955836c415ed1f4206b5aba3d7466f2ff8529d87a136bd1451a4f8cae22f80cab54080b268834beabeab38c3c2337692fa4d076fc366e705397e24b5a2a7633eb0ef195c7eca57a4ea723354877f833a246e3bf2b2c0a5928992d0228fb7f55a6196b42d1d4eb93d3ed6de63b1b886bb72055599a3ab2ce1e0ef379cffb38348c20cd209c52d13b5d66ccff74b832763c7d8c78895748fb4a6aa32a16dd15d7cdda6a1ea7b9d9cb4734a20858e4d901bbde1021c61f8013d8cc42604dcfc2bc7354a433652bb63feaa9d11bb02ef80e2bc6db00aa100201e91a00d1a88260519bb84be2fc4ae98bd66f39d22be9e8861c9b60158a4f157f58914842f706dbfe5fb0c80b48231eafdf33452135a599ec1f6f485e327e308e9526ef03da886c24ed4308e4a1cfcaa6b22ac386161f2e8d3fcb5d494b827ef618e8aef09719a0a78c7e34698bf5111acc5a117741e3b3c92a02178b5bbcdb811ea22c5d55b8a1eb40b485f98e11177b7f9350e2c57427f7094ddace4ba4be39ab14a399c59e9aeae85fdc275e07383d39954cb1203e1c1fd5029fe96dd9487bf3583dfbd4fb72545d212c272ead27c64068fe15d9ac52cda184b388965e2f044313836d1773b20dc55d5d9e1010bb27c966be88f73c3a9d457f42770bfb03b13c74ec14d2824a8b46687cbfa54bb97fc864dc58f3979fa10c94810c9d9aa5e966eae72839c76ee54e0769704a8d8f53512c67934771d963ad0ad6e445562e225da17fb79b33e9b2ac73c08ae8abc9c3331054a663eefe7cb9df96c4ca967375047f15924ce1316a022289c21756a40c5d703ebaf4b0504a7f810c3abab24d59c9af2934e7e3b23d1ebd7e58ea2db0fbec795c69c1bcab91606a9d000cf9f25c85bf100f15bd80d34b1148f14680636a146e90dfccfcf7ca8fc8d6d85dbc878bc51be0a6dba671f71ed69857c613539723269d8673cd3f249b30e047433906405f7d6b170148f208e70cd7856d81f202e1b0f9be789fdf793e2aa6e7c8c2eed926bcd07e742f70b6ce129feec9dd265118096450cd14f87708d2e10616fe3703da7b9ef326096f5d8b76a328c66765ed1e18f3300d02d92ac35e293f8fca91681fa39cb5530a2e4cc8414e4c000b8618cc3ecd2fd69342157987847aaafaada2dd43f1fd28d4409a3505b2931fa41259d43e51418c25774df5724814013cc5fcada5c335b1c0aebffb478c445dd9521c9d0ed06eda81dfd1ac670ba0c72abc5612cb8d36e22de198e4695f3ecfc790a4775935362e444ac0ae986a9483c5867c52b35f37e96da47448c42262dd7ed753d5e693228a9f7fac093661f414919462394f73e33f15a87fe9112a6e685ab475d3b060309b393ffb46b1cb233a2bbb9d17854acf5d137ac7d90a51f4fef100186e737e00bc804f55b95dfc0dc8025929b955f5394c4f6955a8350a1fa33eb4877cd881689f88d700e24eff4976e56ba8f0a1760ab3cf10ae7810fc39404af25acece2c83f19da773bc1ab84a3703bcb28da853afb2112e888de64729b6546a7617a99cf594c8754d2eb612402db59d8934cb668b18eb0ab5455ee282919090272905391aa79b345bbad22bc19a8bfbbfce0cb66ba2c4348c457cf1f44c90edff767761e125d09aab788b3e19c5434c95238ceb72175fae4cf3386a81eb27c1d3ec917e53f849a813f544feed151ad890f30f1b8b164cdc8e69778f4c11c58d80eb95b9359fdab718ea761127585aa74a24e3cf75fe1c1c8b1c9fa311a39d95cffbb86517bc44ee0a80afd2afb1767cd5244f1a59a73e876e2c51a5b2111b998c4046dc69068b740486888c4d48a97f1404e7ef92b18181be0db9c46cdb68f85d69fa5ffe9a93384ec92f08b50c2f142917af3c90b3725475865bf982275d64d4cbf1f920b4ba98376b6eec5e27fd5844e1a6acc2fef41600b3c1ded8b79392bba237fb739de215ce137e8e625d32f8afdac5ca9c14d5e7fc9d091e2bcd10a4c7fe9b3c9d0ee4d9ae13c9e79ceeea43bb3368749ab5666acfa13b2e4dcde79d10d384de67978e9d93bf3b5c7bbeb1246f89bfc73024a6f9a35b81995cc67737659fc36df60cf61e78f565285676de2ba04c68dc9b538173ab824", 0x1000}, {&(0x7f0000002900)="ef90f1e936a29edba38ecbb23772426d72a09e8835af05e7550c926ceb302a02e88ca52bbc77194f926ea80948e55ba43a57dd2dbb42a0b8ebf0b5d25b0f6e4a80d1f52c465188adbf18cd86fd8dd0e8887061fe2b4b9ad12155b11491b23f7a61c47829c95aff920f2c81dc37269b18480771e2ab13b45701e00406c657e9f8cdc84c51d731f3c4bd5f5084fb31b55ce234c935d2832bf32ae809def0fb7debd4f9db76df759cc39cc49a4075553453f79d32260423aeebe2d7d57945af3ade159505b64d05e09533ab39975b37b5bf35b60d1ec3a1fe752a243e2f291bdfe0c4ed84d74c2ca6ecb58f2b485874323d8b236f562563f00ca317253f5e76974f754cd9217be49f27bfe2cec26b0537a243b9e22ab7eec313d6885dff38df91f5ea90df679f1bee8982d74ce6bcd9027baf719bd51d74297e1c5b5440823da678fd136596884f9c9e645d7f5d346e85f3f5f47444683db06a6e87c997812fa80ac1e5701d847cc75f1f02febb12bcad56e22e17bd1b6ff5727a850e47f79347acd2e1cc765072a41d0e42296d8e8b2c7490be089bd0d05c0cddd9402b2141fe6ceb670a68dbd16dd427afd59bcf7c4b40dc168b566aa980d3e8e41dff000d77aa2945e9f246972ef995654d8c680a91bab499e420211935cfd794b776b548c32ef96071309d7adadc97870675181040b2104fea3034f5eef44a3559fcd93a300447d8a2590aef33de5a3ef862ded74585f3b10010a9c590f68e6bdce17450e1161c15c61a779e683cfcafc350b4ff9b7c0730887b64121d39f91d0d04ff51a669ee25cb980cfcd4f8df04eaab9307a4145ab7172c235204d4b69e15a3f8827d7484e7ddaae6071954f83a390109c49c1bab606da6cc89641d6bb16eeaec3cbe95e28759d33535be87e0238f562c53388204af0e88b9f12b8f0dc414847cfdd5ad4585eb4eec587d1b25aa603db9f22a87dd4c6635b476a28f29d8c4674d0ff7ac04554054b0693b90ff69c055259c26c0b29b289505fbee30d99a6c14e451025f8301ebbb5115ddf32f2818b2a76ba5a562c39543b4c86e05c5a166f67196fb15acecc5caa6d0b88bb9e476ce510e8e28a27afea77cb8db16b530b83d1218b65a1bf9684d16895bc4a1c7033819291017cd29338abc761493603bdfed6c93e0606a8b08d4a70bfed2c825656578328f318d5e7cf1fbfd09780f054349212a56196034d99310c379c4b6846081a83025c12d66119598aa1aefdc553972e09bb987ac8ac80cc1bb13e6f4b7982ac3eeb86e077e5d76475eb3dae234641193d3cb35956a4697d755908fec8c2248f201f1caa1baca548c9dc3eca2ef41e16c62fcec6c4d69eab27bd5c2912894d624fb65d9db1b125bc3a5dbb6160db0b8e86d48f8a17e117808a918fd720207fa9f11c5931d8b9cbb8cae21bbcc6f543af3a6d8900d6c2b7014219d95b49b3c3672bcd6d82b3742307426a3a16fd6e476dbc8b9b76d8c6d453fabb1707c03bc2048a4d36bf4ff1989664c593358583db981dd5709773e5ad1059653ac1b66b1f7fead46f0af55bc3cca96ff490821213ea0a937d7092fb786e02fdb63b70867212166b04acb60458258a1b9072f9366d5d18a4741d7f481893401e6179fa0a5ed727c17c0b835062c1edef50c0302bb987c6a58a793d21669731c5692decde0f71937e726edad966ae9dc2a462e02301bca707675b17e65b05ba6f1bb26dcf04ba5097ea74cd9f436741698407300128013e391486134ee4891812dbcdaa564dd0b20ef4da7b006ca6a343926c1868783f874be0b1809da89140ac946652dac0d2c1e2db5dd73a2e0e6b7b1c66e78038a456a69db2d6b8cf299b0b7a30a2f2b0a1202896b52952272402ddb8b0be817a1724a03566ce0bb6b9e443f885b710be5252682b9cc0d810e9a739b194d815d228efac2f2dc751f630d8321b82e7ef0724d2ed2d95108d7343fbb4591936f457a3ad8c1cc4333ae5b0cb4655bcf33cb80ffe1a1146b0b7f3dff489447527e8e128152dc814cc009ad381db1bd32686734cb0b9be50610c312667c956697211601227051485bc640a72d63a0e1cb8e83d84cef32a4dcc314fd5b7595ce10604ed1e65f902a3215e6b5f288fd8df80c2bd66fcb5198c7bfab36a6445c10f03eb6f8b0d75684b8ee48de20fac326b3e4cf7a85e93f5fc6e35d6726d7f66c36a70e1970280a9903465e545bbc7942ef024f2786aa4444f740c74f987566cdb1bbe713775bfa2aea640e2a1c592b4e8e12e3b6b238dd21e2099c471ac0ff0cf8afabff8bfdb68f26f87e9630370950b48ab7d0df64d2ee2a1ea59389b124908e12f4cb3b06e64066bf4d16dff12cc295508f8e1e0d43b6cc5dbd14a765e7bdb40ced4c5d56eb1952c6dc84d452f5afae04768cbfc8438bd709fdd4433767badf53a707de02e2a515be97a44142e04c6eff433868d2ba1da9a0499948e66acf7431645462933109995e4d48fe428d356eb64dc04dfe1f495f38420594e795018fb3a5a740c773e56bdd281f53fdd73addd136d03098fe43314f5831ba4a40f228e3ff99eafc5ef1de2b93b80d18931c4926f3b422eed05773f77dd26bf4fced420183620a17f3a679e68858d1c53141721598f33466a9a2dbf12e785f5680ecd51596db2b7044f62abd92b051e3076539a5bdd71db8b29302c8d8654de1fe77c9b715fc3a4840005ab6113f4340542fc0ba1c07cdc47138d688328e44bb7c37aaacf102d82263af9687c95c59e7ee422fbff11272df10b826d3d577f8706b42300c26048681ba2001f66c0a5765ef9538cfc5f536b0dc34aeecf2d65f87d473bcb4797d102a9ffe5157fc554eae42390340b1633504a79d14189b4c91938ae0b4fdc8cf132a806c0a69e67a2346a5c769f7e871b2dcac79f52fef8f9be8636f5cf4d3594082e0590a72f685945a2c0b80acbc4b891da03ab5f229ef2ea3e6a37d97f8da14b319026c59ad705b6881f5fa6dd8f22e5bb0ba65241c2f9d2dd62280290e49ca8aeb619023cf4f73237d33d1a4901cc46bcf0ad98824b88847503d0d48be2d002751b5da601d3421c624ed7a18df9ba77e8d37412105aab4aa0e05eba8ce9463c8ef5c9ce4b34fe86f0a0b4a8d63a33ab64445b932cfe31c59f3e6f2dabe7c0f296f37b1a56906ae02c020cce8dd0669586fe43fa78af6bb7cf57ea72d9b01fb1cf043f3fc02d1c88c4969c44c42988b53e06b5b0e6ba4bb356cf646f08c0fba211dfa63f19d709f864238e42b89889756b65775073d2ab28a00841a11ffc6749581c2378dd331d17c35d26e9f2c3b2bfa9f89fa530c3f6cff29a03de5001fdebb273998023b2831bcd9555aca5845d933fd783baf5e4157f06911a9a01518b9a1411b988d43702c7568b3f3b6fa3ee1c8cd1db1e955899ab315a617d03e7a18235dae356d4132d11b64996300fde11cd07fc4ac583388281eb467effd7ae9b29b25061dca7ad76fe6ec811b849b02fb0c6bcb4dcb5d12a5685cdf21e0698f137fad6f034be320c723be2d8cafb2dc35c1bd72008a0ab7e7ac7a89d8e1e5184eaa59ca9a50e6ce3610acb539c43569c66d55c6cb258a478d44c4f316b54e1bbbee0377f3256ac58ba9789bb63802ffeecbd943cd386895e00bc873450b2f0f0a5276b74ee212958fa11f3953e006357651ca30ae296433b8a6eff187e81d3c65caf9f0e0f7a95aeeae392de0ef48362386583c52344eccbbbb9c8d52239a6c6f59a007e121298287fcb7d3089111c8f4661b364a881ddf5890e4c4a8c6103ac0c122d88fa86eeae3c6bf9552d31cc898b95d12a05e5d6fd6b8bfe1315bdb119535d3ec1e59c88ef1aa13aed4c7f0a94562568a2b3af9180446096caa2acd658de66efbee1c1bd135239c2d84b1fd2efbe38987f727036b681860cb754bddb204867798d31ebe2c7e0c9af4a1b77c8c96dce19aeba0fa9b794516985d07589831b6c9f2ab7e7573b697500e817a5889d2ff34bcaac208861e7f906a7575b511295e028ae8373f1697a02c955b221199687a37b55ed8d8ce128420c766efe202526794be2cb1fb2cbf010fb33dca81a890463654ff4c9b648f5aa5801d6dfe02584180bc2defa4ee52fdf481b8dcab32c225b1150e1f4bdb0c8881d2e50757855d762852c41eb9ee5b8e635364d4023b35604b1c2c9ce7dbe90d67fd7a53f3fb83bff3f514db868e2baf0d19ac8aa1b44592ad0e9b7d9b1f7e5abbbc4eeadfaa4b867eee186eaa268d6cf9fc23a468af2d5b041fe443a5b5844ac9b3fdc32b16515891bef5385ad587cdb1c4cc732df983834b23f007a6e74a327389f21ca12f28bce2ff6566776a8265c6321cf90a53a49c8116be09911bdb127771efeb0a6c087f6e38078de2d0aadcac1c1a2851ead3e6d10215f3ee27c3112a0476403a6044c144d20645a70edebf3a598b9b58a870a72e5fe3b7f8897084f526698ce53d9793bd297a6a11270e08f65cb8206dedcd31844ef5968585f91a703a8ce8ebb58439ddfff721b5db7d2cc1d4b2ec3dced727a7d77c285272944b7fea3c821168062e512b14d5f6d68a233a48ecc3891681dcfb462a63a8414ac83d603c47f6110de59a8f30c5ff231c362dc44e60b2d41066bdc977354e03b67231a2c333df2970503393c7532d887c44e01c871a8bc4cfae6a321d52a8318d46afe320a784c22f566f697db89698915ee04850e2c6e6927e460d3a5e7e7cb08bd1705cea5e973a12986f33d9dac63e773ffb22ec19054f910766600bf94be80aa82267f7da55714a7ea421d31f6d335d06ccbbf3cdd13c265c2f7201e02054f5579861e4348a5e3999d9de592aae20c09277a1c115b83ccc4f68eb83f12fa69e736cd16e32964cd0bc6d8634ad1d2625b0cc5c9e82542fbcef3cd8cfefc7609ef328c494ee8f366be5d38878541273a4ffbdb4bd2aa1af3d835078af3a863130a358b6ebc5e15702992835ce51fa3f3f49f53de879b937befba8af7ca10bab9d0813cca6e5104b39b881e73124a9911ac59576c66f148abc6d6030af2f1796e3425b6f7a150f83c3a47e0da4e1d3e09b605c6ec15bca55dd650be618d815f24d1b2f32308c116c106d5e7ce4850ce9aa87f415c5998cf33e327db3d88f5f10082b3dbf4e026a5ee050fc9ebae081189acf759694f15dd9bc6e6fabc8ba6a9fa6e6f9e95c23f68d1f25c196ea6b62861a2774916b38d827df5057e36f7406c198318262ab2d1d37ab0557f6ce539b0c53bb8d942259067d1dd3d161745b702f502a260d97fec616738ef68180dece879af87fc31c3d5e3764cbc98b8102c59669cb68499afbc2356d66fdbb89d7498e278c5c7823d89313dc508ebfbb544a15af79d6de289dfef314bef3ca64571f376d72bbff0a75bd37f21035a939a3b9f511040117882f7543dbe781362685b93ad02c2e1ef99197ec7e09cee1b5e52b9c1efb9ca365d269afef6c96d1e53cf44b2012698fe5049d772ad9e494cbe83c7e1b4c4b27f5ef0adc26d2f9d1e1610ba4f024b2574b12d218c8126e4f46eb6dc7c87eef1d1a5720b44926ec2741604cc97fef37dbaf43b574d32d5f2015671ced578a845ef00373ebc04f8331bd35b27e0094546f7bb17daf3f126562f0193ca6b57622856e78ca50fcc1f4a581e28ece361de51adb693bec72a300f761a132c3de335a63f8a79c98d03ea922b52f228528e06c2a5f52378f84d55281acb97ee701935dcbabba2563d04ad6c36cd87a70c57cd574607dcdbae35097c3b92cb8be2b953650ed99ab281dc599", 0x1000}, {&(0x7f0000003900)="165df4ceb9bf422adeb3c62c603170adb6e9de29e21ae4dbe99985a73e9d33b0256ae51338851d1e0a28aa981b1272f1e7925333de1075f550d630abc116b874795643b0c312960a7ac649", 0x4b}, {&(0x7f0000003980)="00f9f7efe64c942d6d5b9595bd472012301acc082724ecb078e5adfd19550c040056529ae4af226768c0b0c5e132aa44a52151c6754ca04af87cf6b11e3d035cc01d46baa93e53a271e50f5d003bb01f437132d6752b0db776cc5287bf6b6dbc60eb8135b52f06423ed1f65b123439eb63c4274deb52c5c69cd0ce7be828211997bcf1bbb7ab4218587d8ae394dbcb20d447c6d2a28f278024b1384236a2ac4b1edc08ca9aec896d", 0xa8}], 0x8, &(0x7f0000003b40)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x7ae}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffd, 0xffffffffffffffe0, 0x8008, 0x8, 0x3, 0x59, 0xfffffffffffffff9, 0xef2, r6}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @authinfo={0x18, 0x84, 0x6, {0xfffffffffffffff9}}, @init={0x18, 0x84, 0x0, {0x4, 0x4000, 0x8c47, 0x3f}}], 0xa8, 0x24004000}, {&(0x7f0000003c00)=@in6={0xa, 0x4e23, 0x3f, @remote, 0x1fea260f}, 0x1c, &(0x7f0000004d00)=[{&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)="558baff9908bb5dc07f54715a187106f1fcae2c42b7d659f53e243094d18b4deb09ab7894d10c168689420d92ba4641f2af8c8389ac753f7f4b23bdc7abe06633a3fe9429ad44b80a6fc34f27ccca028495bbdf654f10bb314d3cfe77ccb1ea475a07e9d2c4dcad581775e8e", 0x6c}, {&(0x7f0000004cc0)="c12d43961fa030258bddc00daa3b9d5e9d579970b62bb932c8ffd5828a51e49cf03a0aaf49", 0x25}], 0x3, &(0x7f0000004d40)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x9}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @loopback}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x68, 0x4000000}, {&(0x7f0000004dc0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000004e00)="d82dc5b738f1104776987264919186b0c1f639b2", 0x14}, {&(0x7f0000004e40)="7c39d3607e851238355aaf1947f484ea115356a4c370b895fad58a0d66a538c7b229b6cdf639d987d2be3e6a3d8b0ce019343aaa29051609893e4f5d6328bdf34afa5bdd744b2f8e92cb97a442ed2d404a45ca", 0x53}], 0x2, &(0x7f0000005000)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x6ad8285e, 0xff, 0x20a, 0x9bb, 0x1, 0x8, 0xe52, 0xfff, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @multicast1}}, @init={0x18, 0x84, 0x0, {0x3, 0x0, 0x6, 0x1ebc00}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xfff}], 0x98, 0x4008000}], 0x8, 0x10) [ 2148.974271][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2148.980144][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:04:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x133}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:04:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:04:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1d7, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:04:58 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:04:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x128, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:04:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) epoll_wait(r1, &(0x7f0000000200)=[{}], 0x1, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:04:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x480000) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0xfffffffffdffffff, 0x1, 0x0, 0x0, 0x0, 0xfffffe}) 05:04:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x129, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:04:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x134}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:04:58 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 05:04:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x135}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:04:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x136}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:04:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x400000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:04:58 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 05:04:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) fstatfs(r0, &(0x7f0000000940)=""/4096) 05:04:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x137}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:04:59 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 05:04:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1d8, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:04:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x2004) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000200)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x200020, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@posixacl='posixacl'}], [{@obj_type={'obj_type', 0x3d, '/dev/input/mouse#\x00'}}, {@uid_lt={'uid<', r8}}, {@smackfshat={'smackfshat', 0x3d, ',$'}}, {@dont_appraise='dont_appraise'}, {@dont_hash='dont_hash'}]}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000005c0)=0xe8) sendto(r0, &(0x7f00000007c0)="fcd71c051b0a39911e2a3460cc3f275a8143267c82c6f4da00da9d72c290cd96bbef723913e903971ae8a90291794fa7dea2717f988df58d42e9d0dc278cffcd39029ba01ecab653c5ecec2a16126ebbcd7b8ddee2c07ac4193175070df669c102d615240f44f636609502288068894d2c10e46ba18162fcbe9aca245650b278d4991f0ba5dad355b0e99f72624ded70ce37e0029b1dea4d7a1cb7994c0327f1d00ad6be86169bfca772a5b3fd477930d89b5cd4995d11d929097acb15f07c4a7ddab6be2650f7e8c8a247562c686d46fd650012d73efc77c68133b66e8f7986", 0xe0, 0x40000, &(0x7f00000008c0)=@in6={0xa, 0x4e22, 0xfffffffffffffffb, @rand_addr="d7839aace040969735c6545dd7b970c4", 0x4}, 0x80) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000480)=0xe2d, 0x4) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@ipv6_getroute={0x13c, 0x1a, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x10, 0xea36, 0xfd, 0x5, 0xff, 0xb, 0x2100}, [@RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_OIF={0x8, 0x4, r9}, @RTA_MARK={0x8, 0x10, 0xffffffffffff3abd}, @RTA_ENCAP_TYPE={0x8}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_METRICS={0xd0, 0x8, "a88cf7a75c14c3c422986452ef0c17142e345c22796019add3e74d7f3a8bba72543f19b062a5e15d0e35b3c585257d73ce3f023cee547f44d2e238647dc34d7fc76491d42fae7cdbb1870616f25db7ffb62c0dc05ae6a709b25b4ec3327f42305d54ed4f2925765f9c88145a148a89d798f1abf0eb4dce6f318416f0d3d403fc19ff4716887d517c54bdd5ff8987d093c07a75b814296f18222209c76fb0b1047c8e21bc00ef4a60bdd63bffc63befffaa11703d04488cc49e6ea86e7bdecc9426fddf8addda7d4f8fc212"}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0x7ff}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000940)=0x200) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:04:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x12a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:04:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x138}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:04:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYPTR, @ANYRES16=r0, @ANYBLOB="ee17ddd1ef622e697911595148d20df7991ccdd492d62c1617fd9d18445f27c2fa14d587cd49f9e512332ddcb56f6df7a72c682443d79cb6b73e38ddc462aa399432d3638903f332e7ade35617634c2aaed20130e49e3ae25ca267f27d94267ffb0ced5670a4a532661d09b428340bc7ffee56e076cc57868484947feb530a6192462e7c7fa26c991c4f8a4bd6eaa8cc5ba9c8ff4abf6eb90faed776663865a5bec99b1728d579bc0f36b468749f9645182cd73743d32c5622c08904c8be13683aa62f7ed8e11f347cd40f", @ANYRESDEC=r0], @ANYRES32=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRES64=r0]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:04:59 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:04:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() r4 = fcntl$getown(r0, 0x9) setpgid(r3, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000200)={[], 0x84, 0x8, 0x9, 0x0, 0xfffffffffffffffa, 0x1d000, 0x1000, [], 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:04:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x139}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:04:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f0000000180)=""/131, 0x83, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af04, &(0x7f0000000900)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:04:59 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:04:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x12b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:04:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x13a}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1d9, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc1) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x5) 05:05:00 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x13b}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000200)={{0x70fc2f6d, 0x6}, 'port0\x00', 0x0, 0x10, 0x800, 0x6, 0x7, 0x22c8, 0x4, 0x0, 0x4, 0x2c}) 05:05:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x13c}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:00 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x13d}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) 05:05:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x12c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:00 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1da, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x13e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:00 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0, 0x1f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x941, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000940)=""/4096, 0x1000, r2}}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) syz_init_net_socket$ax25(0x3, 0x2, 0xa6e904fc1958d845) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x17b) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:01 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) fchdir(0xffffffffffffffff) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x13f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x140}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x12d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x141}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:01 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) fchdir(0xffffffffffffffff) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1db, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) dup3(r1, r8, 0x80000) 05:05:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x1210c2) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000380)=""/62) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x141) r2 = dup3(r0, r0, 0x80000) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b838487f8866efbafc0c66edb800008ec80f09f6030066b9e10b000066b8f900000066ba000000000f30baf80c66b8bce7b28566efbafc0cb8a800ef2e0f22a60f20c06635080000000f22c02636f3af650fc72a", 0x58}], 0x1, 0x40, &(0x7f0000000300), 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000000)=0x1ff, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000300)={r0, 0x0, 0x5, 0x1c5, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x142}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="ef66292d830f47459ff5b9116af6138b988257e959066e930ba1e39639b836c2156218c444c1a03c26e6c3fb1260d66e2ab123e75d384b6d48e2b34069dcbdc71449aeeb8ef638a4e540696055eaf1ec4659f7215452e46fee6703cf8f5849ff3139144229333d2e048e2d1b34d9f448af091fcf0d51d4d569cd17efc16df54c3e637aa51a304b9a80", @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES16=r0], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYPTR64, @ANYRES32=r0, @ANYPTR, @ANYRES32=0x0, @ANYRES16=0x0], @ANYBLOB="0d1d21738196934e18a3b9a4e9e97f1a4eaf64b200b29ba2aa9ae6e9720b4c6d6d10b2acd77f71f27f6ef9", @ANYPTR64, @ANYRES64=r0], @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRES32, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="c26bc85995b161ee969510ce457c89b7bd1ca4ca5155554987efa0dea57e594c96228940b8c3def220f0158d0f0f29d1897e18965e36505e8f7be63135e300a168f49dd7833936cd22f9764e579c6347fb568faa03f5cf862d957ea91e2c0fd0a78af8f80e8b5eb0e3ee29edd27c818abfd98754126973c729f7370b305d62efc3c18948f0a65fef451987f2b8d32a4d09731ddebeb2e6ef30bd2834329897e58b80b5ba1719e7a771bfd0d39def094a50983226bbc9d8810956635d7f77b44e2ff6d8d04305d90636b9fc7f44b545eac0880b3b7b3bc1bc13af350859", @ANYRES64, @ANYRES32=r0, @ANYBLOB="506625e1fd31b7256814609a1bf5b26b98bc1f306f2a5ee7014d28ad8bfb59de0face8db19e5a310181305b4ab63daf29b0dde061fadc3", @ANYRESDEC=r0], @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0]]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) mq_open(&(0x7f0000000000)='!posix_acl_accessvmnet0&!+em0\x00', 0x42, 0x100, &(0x7f0000000040)={0x9, 0xc6, 0x5, 0xb46, 0x7ff, 0xd2, 0x6}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:01 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) fchdir(0xffffffffffffffff) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x143}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x105000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000180)={0x3, 0x2, &(0x7f0000000940)="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", {0x2, 0x2, 0x49433553, 0xf, 0x8000, 0x6, 0x7, 0x20}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="3a00ffff0600000000000022000000000200000000000000010000000000000011000000000000002f6465762f76686f73742d76736f636b0000b9edc5cdbf22d34642a2f599638225e097b58b80071f5c5a40609117870bf86b19ecd851b607fe726778ea5e7f7e582c2a3fd3cdd300303f30810a"], 0x3a) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="2118da43d34da8bded3a02844e3b2d256bc7d64149334551c699f2d7766f27bae52c8e716e5ce31b1758cca5f27ecc19babcf3ffe192f072134f01e94daed915671b271a3aba05fd8c663aa4672ca96d504cc372b55c8e6ad1ad75c22a327b27aa390648a53eaaef3c2c828a523e3ae206ed7dbea5b76eb6ecaf3fa3478392d23c0c150007d8a06dfa99088116fbb5bd4a2c02f673bb65de9ecb5ae26f52efd6670f93c35f1cc54c68f97e4fcadd3f2c15dc6f3f5a66549572d0d9c815056efd0166103416931f282d6ca733803ebe2c20b70936a14747b18c32bd9695266261a1a47d8461", 0xe5, r0}, 0x68) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000140)=0x10001) 05:05:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x12e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:02 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x144}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x652100, 0x8) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x8b, 0x0, 0x7}}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 05:05:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) set_thread_area(&(0x7f0000000240)={0x5, 0x20000800, 0x400, 0x1, 0x6, 0x3, 0xfffffffffffffffb, 0x3, 0x100000001, 0x401}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffff9, 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)="776fa10ca056742f909651a588149e1ad5cfe28607f972bc914f947e99ea6d859890d8928a", 0x25, 0x7fffffff}], 0x1048800, &(0x7f0000000380)={[{@hash_tea='hash=tea'}, {@errors_continue='errors=continue'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@noattrs='noattrs'}, {@noattrs='noattrs'}, {@errors_ro_remount='errors=ro-remount'}, {@balloc_test4='block-allocator=test4'}], [{@subj_role={'subj_role', 0x3d, '/dev/kvm\x00'}}]}) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1dc, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:02 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32=r0]]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x0, 0x0, 0x100000001000002}) 05:05:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x145}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x12f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:02 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x146}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:02 executing program 3: mkdir(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@broadcast}}, {{@in=@local}, 0x0, @in6=@remote}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x1, 0x3, 0x9, 0x1}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340), 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='tmpfs\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e, 0x80800) mkdir(&(0x7f0000000200)='./file1\x00', 0xa) 05:05:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x130, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:03 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x147}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2154.219655][ T1425] overlayfs: failed to resolve './file1': -2 [ 2154.306085][ T1417] overlayfs: workdir and upperdir must reside under the same mount 05:05:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x73, 0x80000001, 0x0, 0xfffffe8c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) [ 2154.655140][ C1] net_ratelimit: 20 callbacks suppressed [ 2154.655203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.667340][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1dd, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:03 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:03 executing program 3: mkdir(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@broadcast}}, {{@in=@local}, 0x0, @in6=@remote}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x1, 0x3, 0x9, 0x1}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340), 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='tmpfs\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e, 0x80800) mkdir(&(0x7f0000000200)='./file1\x00', 0xa) 05:05:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x148}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2154.735051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.741239][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.747706][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.753712][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.760130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2154.766198][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2154.806309][ T1444] overlayfs: failed to resolve './file1': -2 05:05:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x149}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x131, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:03 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x14a}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2155.009215][ T1465] overlayfs: failed to resolve './file1': -2 05:05:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000200)={0x43, 0x9, 0x1, {0x10000, 0x80000001, 0x2, 0xd2, 0xffff, 0x10000, 0xaf, 0x9, 0x7b61d932}}, 0x43) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) ptrace$getregs(0xc, r4, 0x8, &(0x7f0000000280)=""/72) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:04 executing program 2: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x132, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:04 executing program 3: mkdir(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@broadcast}}, {{@in=@local}, 0x0, @in6=@remote}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x1, 0x3, 0x9, 0x1}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340), 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='tmpfs\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e, 0x80800) mkdir(&(0x7f0000000200)='./file1\x00', 0xa) [ 2155.214300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2155.220132][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1de, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x14b}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:04 executing program 2: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) 05:05:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x14c}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) r8 = semget$private(0x0, 0x0, 0x113) semctl$GETZCNT(r8, 0x0, 0xf, &(0x7f0000000200)=""/172) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x14d}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:04 executing program 2: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) open(0x0, 0x0, 0x0) 05:05:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x14e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2155.988127][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2156.007592][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:05:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x133, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:05 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2156.185666][ T1509] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 2156.198153][ T1509] CPU: 0 PID: 1509 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2156.207084][ T1509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.217124][ T1509] Call Trace: [ 2156.220397][ T1509] dump_stack+0x172/0x1f0 [ 2156.224722][ T1509] dump_header+0x10f/0xb6c [ 2156.229140][ T1509] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2156.234944][ T1509] ? ___ratelimit+0x60/0x595 [ 2156.239530][ T1509] ? do_raw_spin_unlock+0x57/0x270 [ 2156.244633][ T1509] oom_kill_process.cold+0x10/0x15 [ 2156.249744][ T1509] out_of_memory+0x79a/0x1280 [ 2156.254413][ T1509] ? lock_downgrade+0x880/0x880 [ 2156.259245][ T1509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2156.265481][ T1509] ? oom_killer_disable+0x280/0x280 [ 2156.270686][ T1509] ? find_held_lock+0x35/0x130 [ 2156.275470][ T1509] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2156.281018][ T1509] ? memcg_event_wake+0x230/0x230 [ 2156.286049][ T1509] ? do_raw_spin_unlock+0x57/0x270 [ 2156.291174][ T1509] ? _raw_spin_unlock+0x2d/0x50 [ 2156.296022][ T1509] try_charge+0x118d/0x1790 [ 2156.300510][ T1509] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2156.306088][ T1509] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2156.311630][ T1509] ? find_held_lock+0x35/0x130 [ 2156.316385][ T1509] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2156.321919][ T1509] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2156.327454][ T1509] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2156.332645][ T1509] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2156.338173][ T1509] __memcg_kmem_charge+0x136/0x300 [ 2156.343271][ T1509] __alloc_pages_nodemask+0x437/0x7e0 [ 2156.348637][ T1509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2156.354885][ T1509] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2156.360653][ T1509] ? copy_process.part.0+0x1d35/0x79d0 [ 2156.366145][ T1509] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2156.371423][ T1509] ? trace_hardirqs_on+0x67/0x230 [ 2156.376427][ T1509] ? kasan_check_read+0x11/0x20 [ 2156.381266][ T1509] copy_process.part.0+0x3e0/0x79d0 [ 2156.386456][ T1509] ? psi_memstall_leave+0x11c/0x180 [ 2156.391646][ T1509] ? kvm_sched_clock_read+0x9/0x20 [ 2156.396750][ T1509] ? psi_memstall_leave+0x12e/0x180 [ 2156.401931][ T1509] ? find_held_lock+0x35/0x130 [ 2156.406686][ T1509] ? psi_memstall_leave+0x12e/0x180 [ 2156.411908][ T1509] ? __cleanup_sighand+0x60/0x60 [ 2156.416826][ T1509] ? __lock_acquire+0x548/0x3fb0 [ 2156.421755][ T1509] _do_fork+0x257/0xfd0 [ 2156.425910][ T1509] ? fork_idle+0x1d0/0x1d0 [ 2156.430353][ T1509] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 2156.436422][ T1509] ? lock_downgrade+0x880/0x880 [ 2156.441255][ T1509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2156.447504][ T1509] ? blkcg_exit_queue+0x30/0x30 [ 2156.452561][ T1509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2156.458029][ T1509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2156.463478][ T1509] ? do_syscall_64+0x26/0x610 [ 2156.468156][ T1509] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2156.474209][ T1509] ? do_syscall_64+0x26/0x610 [ 2156.478881][ T1509] __x64_sys_clone+0xbf/0x150 [ 2156.483542][ T1509] do_syscall_64+0x103/0x610 [ 2156.488127][ T1509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2156.494009][ T1509] RIP: 0033:0x45a7f9 [ 2156.497892][ T1509] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2156.517514][ T1509] RSP: 002b:00007fffc51663a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2156.525923][ T1509] RAX: ffffffffffffffda RBX: 00007fd54e1cd700 RCX: 000000000045a7f9 [ 2156.533882][ T1509] RDX: 00007fd54e1cd9d0 RSI: 00007fd54e1ccdb0 RDI: 00000000003d0f00 [ 2156.541851][ T1509] RBP: 00007fffc51665b0 R08: 00007fd54e1cd700 R09: 00007fd54e1cd700 [ 2156.549819][ T1509] R10: 00007fd54e1cd9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2156.557790][ T1509] R13: 00007fffc516645f R14: 00007fd54e1cd9c0 R15: 000000000073c04c [ 2156.570544][ T1509] memory: usage 307180kB, limit 307200kB, failcnt 1902 [ 2156.577549][ T1509] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2156.585362][ T1509] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2156.592207][ T1509] Memory cgroup stats for /syz4: cache:32KB rss:161604KB rss_huge:151552KB shmem:132KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:12KB active_anon:161692KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2156.615521][ T1509] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1509,uid=0 [ 2156.630881][ T1509] Memory cgroup out of memory: Killed process 1509 (syz-executor.4) total-vm:72708kB, anon-rss:4260kB, file-rss:35660kB, shmem-rss:0kB [ 2156.647024][ T1044] oom_reaper: reaped process 1509 (syz-executor.4), now anon-rss:0kB, file-rss:34892kB, shmem-rss:0kB 05:05:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1df, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x14f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x0) 05:05:05 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000280)={0x0, 0x100000001, 0x301d, 0x1}) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000200)={0x4, 0x0, [{}, {}, {}, {}]}) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x150}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:05 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000900)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}, {0x401}]}) 05:05:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x151}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:05 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x134, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x152}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2157.096732][ T1591] overlayfs: failed to resolve './file1': -2 05:05:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e0, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) r8 = semget$private(0x0, 0x0, 0x113) semctl$GETZCNT(r8, 0x0, 0xf, &(0x7f0000000200)=""/172) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x153}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:06 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x154}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2157.637395][ T1607] overlayfs: failed to resolve './file1': -2 05:05:06 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x155}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2157.801302][ T1624] overlayfs: failed to resolve './file1': -2 05:05:06 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x135, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x156}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:07 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e1, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x157}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x136, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:07 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7, 0x10200) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x4) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000280)={0x0, 0x100000001, 0x301d, 0x1}) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000200)={0x4, 0x0, [{}, {}, {}, {}]}) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:07 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x158}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:07 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x159}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x15a}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:07 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:08 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x15b}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:08 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x1f, 0x5, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 05:05:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e2, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x137, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x80, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r2, 0x9) setpgid(r5, r6) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@random={'btrfs.', '/dev/kvm\x00'}, &(0x7f0000000400)=""/117, 0x75) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) splice(r2, &(0x7f0000000200), r1, &(0x7f0000000240), 0x5, 0x3) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="042adeff0500070020000301"], &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000300)={0x2, 0x0, 0x10000, 0xfffffffffffffff9}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000340)={0xffffffff, r10, 0x10000, 0x2}) open$dir(0x0, 0x402080, 0x41) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x15c}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2159.446106][ T1708] overlayfs: missing 'lowerdir' 05:05:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x136, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:08 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x15d}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2159.640061][ T1727] overlayfs: missing 'lowerdir' 05:05:08 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x15e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2159.753129][ T1733] overlayfs: missing 'lowerdir' 05:05:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x15f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:08 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x2}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2159.939638][ T1742] overlayfs: missing 'workdir' 05:05:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e3, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:09 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x4}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x5, 0x803) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={{r8, r9/1000+10000}, {0x0, 0x2710}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000300)=""/124, &(0x7f00000000c0)=0x7c) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f0000000040)={0x9, 0x81, 0x4}) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) [ 2160.333240][ T1755] overlayfs: missing 'workdir' 05:05:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/rfkill\x00', 0x800, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$l2tp(r1, &(0x7f0000001500)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e22, 0x8, @mcast1, 0x800}}}, 0x32) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000380)={0x13, &(0x7f0000000340)=""/19}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x361) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000300)) r6 = getpid() ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000240)) r7 = fcntl$getown(r0, 0x9) setpgid(r6, r7) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x138, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xa}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:09 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x11}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2160.537608][ T1778] overlayfs: missing 'workdir' 05:05:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x139, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:09 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xc0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2160.737333][ T1791] overlayfs: missing 'lowerdir' [ 2160.894380][ C1] net_ratelimit: 21 callbacks suppressed [ 2160.894387][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.905951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.974384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.980228][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.986113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.991884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.997722][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2161.003490][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e4, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x13a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:10 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) 05:05:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01042cbd7000ffd3df25010000000000000008410000004c0018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x4008084) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) r10 = getuid() syz_mount_image$btrfs(&(0x7f00000003c0)='btrfs\x00', &(0x7f0000000400)='./file0\x00', 0xcb8f, 0x2, &(0x7f0000000580)=[{&(0x7f0000000440)="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", 0xfd, 0x4}, {&(0x7f0000000540)="a52e980ddb3cf23b721baab49016b8c1", 0x10}], 0x200000, &(0x7f0000000780)={[{@check_int_print_mask={'check_int_print_mask', 0x3d, 0x7}}, {@fragment_data='fragment=data'}, {@flushoncommit='flushoncommit'}, {@ssd='ssd'}], [{@measure='measure'}, {@fowner_gt={'fowner>', r8}}, {@euid_eq={'euid', 0x3d, r9}}, {@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>', r10}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r11 = socket$inet6(0xa, 0x5, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r12, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x100) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) [ 2161.280438][ T1802] overlayfs: missing 'lowerdir' 05:05:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x34a}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup3(r0, r0, 0x80000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r1, 0xe, 0x1}, 0x14) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xd0, "94d94bdfaba793a578cc91192174d6845fa19ed82c1b3d86f185a06e71b3752b7f6287c61dc4aefa61e72205b714a8d42fcd767551b8757934dfb208bf3b01c2b907ef179ef69281146f5c6d45e8306c3876ee6c65c9cdfe650402324d5c4a315c62a8b20067aeb377a296688eb089ed9dd09c094262fdb5d4abbe3127a0bad16e82e614e0a9cf694bde14d0555bb3507265db55fc5634f87811690afbb2005018950ccfa2796c9fcde7c9bed25e5ea46c48ec48efeecc8e981e49c05ff3107bdeb4d7c2ca9ee1d9d6b7d9343dc00a1e"}, &(0x7f0000000080)=0xd8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x5, 0x200}, 0x8) 05:05:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xa00}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:10 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) 05:05:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x1100}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2161.464279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2161.470154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2161.503508][ T1831] overlayfs: missing 'lowerdir' 05:05:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) 05:05:11 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x26e8}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e5, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x13b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0xffffffffffffff8d) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = getpid() ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000200)=""/154) r7 = fcntl$getown(r0, 0x9) setpgid(r6, r7) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000012c0)={0x0, r3, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000001300)={0x0, 0x0, 0x30, 0x1, 0x7}, &(0x7f0000001340)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001380)={r8, 0x1000}, &(0x7f00000013c0)=0x8) r9 = socket$inet6(0xa, 0x5, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0x1000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x5001000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r11, 0x704, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) open$dir(0x0, 0x402080, 0x41) r12 = pkey_alloc(0x0, 0x1) pkey_free(r12) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x3e80}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) [ 2162.193394][ T1860] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 2162.230177][ T1860] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 05:05:11 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x3ec0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2162.380116][ T1876] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 2162.414779][ T1876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 05:05:11 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x3f00}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2162.575447][ T1890] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 2162.608606][ T1890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 05:05:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e6, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x4a03}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:11 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(0x0, 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000200)="2e0fae704a66b9800000c00f326635000800000f3067f3f466b9030000400f32baf80c66b874e2f98366efbafc0c66ed0fae9a0d00de462d66b80500000066b90c0000000f01d90f38cd97ad009c", 0x4e}], 0x1, 0x42, &(0x7f00000002c0), 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000002c0)={0x200000, 0x1, 0xfffffffffffffffc, 0x4, 0x1}, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x13c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x803e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:12 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(0x0, 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x13d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xc000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:12 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(0x0, 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e7, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xc03e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:12 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:12 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x1, 0x2) accept$netrom(r0, &(0x7f0000000240)={{0x3, @rose}, [@bcast, @remote, @rose, @null, @null, @default, @remote, @netrom]}, &(0x7f00000002c0)=0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r1, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xe826}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x13e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:13 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x33fe0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e8, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x34000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x13f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:13 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa818250}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_delneigh={0x2c, 0x1d, 0x0, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x0, r3, 0x41, 0x0, 0xb}, [@NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8005) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x40000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:13 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x140, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x400300}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1e9, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf0ff7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:14 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) write$input_event(r1, &(0x7f0000000200)={{0x0, 0x2710}, 0x16, 0x1, 0x2}, 0x18) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf0ffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:14 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x141, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x1000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:15 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:15 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(0x0, &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x142, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1ea, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x2000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)=0x0) ptrace$getsig(0x4202, r4, 0x5, &(0x7f0000000240)) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xa000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:15 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x11000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:15 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x3f000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:15 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x4a030000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:15 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(0x0, &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2167.134324][ C1] net_ratelimit: 20 callbacks suppressed [ 2167.134332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2167.145809][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2167.214388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2167.220571][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2167.227930][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2167.234029][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2167.240863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2167.247271][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x143, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1eb, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x7ffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:16 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(0x0, &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000440)=""/4096) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) accept$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0xb}, 0x46, r9}) open$dir(0x0, 0x402080, 0x41) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r10, 0x7ff}, 0x8) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x144, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x803e0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:16 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 05:05:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xc0000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2167.694315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2167.700117][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x145, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1ec, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x93) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="6d616e67e6b50ea74aa1b2eac5c26c65000000000000000000000000000000000000000f00000000000021000000069f0100a8070000a005000020040000a0050000a005000000000000d8060000d8060000d8060000d8060000d806000006000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400188010000000000000000000000000000000000000000000000003000737268000000000000000000000000000000000000000000000000000000ff09b4ffc8090002bd34000000000000480068626800000000000000000000000000000000000000000000000000000008000000020109000000060009000300ff0f4241f7ff00040400e80ab306040004006d0b00040e004800534e5054000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe88000000000000000000000000010113320000000000000000000000000000000000000000000100000000000000000000000000000000ffffffffffffffffffffffff00000000ffffffffff00000000000000ffffff006270713000000000000000000000000076657468315f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003a00030440000000000000000000000000000000f80058010000000000000000000000000000000000000000000000003000667261670000000000000000000000000000000000000000000000000000040000000100000006000000000300006000484d41524b00000000000000000000000000000000000000000000000000e0000001000000000000000000000000000000ff000000ffffffff00ffffffff4e234e214e244e2208000000080000000101000007000000836b000000000000ff010000000000000000000000000001ff020000000000000000000000000001ffffffffffffff00ff0000ff00000000000000ffff000000ffffffffffffffff7465616d5f736c6176655f310000000069706464703000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000002b0009021000000000000000000000000000000018014001000000000000000000000000000000000000000000000000280065756936340000000000000000000000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000006000000000000002800484c000000000000000000000000000000000000000000000000000000000305000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005801800100000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000004ecbffff020103000004070000000800ffff03000500020048660400050001002000010080000e004800647374000000000000000000000000000000000000000000000000000000ffffffff020100004a05800001800900080002000300010004007f00030009000100010002a910002800434845434b53554d000000000000000000000000000000000000000000000100000000000000f781b394b2c9d29c6b9efc1237822ee6fe80000000000000000000000000001aff000000ffffffffffffffffffffff00ffffffffffffffffff000000a46649a274756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003b00010410000000000000000000000000000000f00038010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000001000000000000004800534e50540000000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000000ffffffffffff093b0004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x808) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xc03e0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:17 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:17 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 05:05:17 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xe03f0300}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:17 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 05:05:17 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xe8260000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:17 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(0x0) 05:05:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x146, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1ed, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xeffdffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:18 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(0x0) 05:05:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() fcntl$getown(r0, 0x9) setpgid(r4, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:18 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(0x0) 05:05:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf6ffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xfeffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x147, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1ee, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:19 executing program 2 (fault-call:7 fault-nth:0): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:19 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xfffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x148, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', &(0x7f0000000280)='/dev/dmmidi#\x00', 0xd, 0x2) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:19 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xfffffdef}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2170.215180][ T2272] FAULT_INJECTION: forcing a failure. [ 2170.215180][ T2272] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.261390][ T2272] CPU: 1 PID: 2272 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2170.270340][ T2272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.280396][ T2272] Call Trace: [ 2170.283712][ T2272] dump_stack+0x172/0x1f0 [ 2170.288097][ T2272] should_fail.cold+0xa/0x15 [ 2170.292754][ T2272] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2170.298623][ T2272] ? ___might_sleep+0x163/0x280 [ 2170.303489][ T2272] __should_failslab+0x121/0x190 [ 2170.308437][ T2272] should_failslab+0x9/0x14 [ 2170.312947][ T2272] kmem_cache_alloc+0x2b2/0x6f0 [ 2170.317834][ T2272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2170.323311][ T2272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2170.328829][ T2272] getname_flags+0xd6/0x5b0 [ 2170.333396][ T2272] __x64_sys_unlink+0x35/0x50 [ 2170.338079][ T2272] do_syscall_64+0x103/0x610 [ 2170.342736][ T2272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2170.348629][ T2272] RIP: 0033:0x457e29 [ 2170.352532][ T2272] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2170.372135][ T2272] RSP: 002b:00007f61a1f16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 2170.380549][ T2272] RAX: ffffffffffffffda RBX: 00007f61a1f16c90 RCX: 0000000000457e29 [ 2170.388520][ T2272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 2170.396489][ T2272] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:05:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xffffff7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2170.404484][ T2272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a1f176d4 [ 2170.412464][ T2272] R13: 00000000004c3a06 R14: 00000000004dc3c8 R15: 0000000000000005 05:05:19 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:19 executing program 2 (fault-call:7 fault-nth:1): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xfffffff6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2170.657921][ T2297] FAULT_INJECTION: forcing a failure. [ 2170.657921][ T2297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2170.671165][ T2297] CPU: 0 PID: 2297 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2170.680101][ T2297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.690160][ T2297] Call Trace: [ 2170.693475][ T2297] dump_stack+0x172/0x1f0 [ 2170.697813][ T2297] should_fail.cold+0xa/0x15 [ 2170.702488][ T2297] ? get_pid_task+0xc9/0x190 [ 2170.707115][ T2297] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2170.712949][ T2297] ? __lock_acquire+0x548/0x3fb0 [ 2170.717915][ T2297] ? __f_unlock_pos+0x19/0x20 [ 2170.722595][ T2297] should_fail_alloc_page+0x50/0x60 [ 2170.727796][ T2297] __alloc_pages_nodemask+0x1a1/0x7e0 [ 2170.733176][ T2297] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2170.738899][ T2297] ? find_held_lock+0x35/0x130 [ 2170.743669][ T2297] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2170.749480][ T2297] cache_grow_begin+0x9c/0x860 [ 2170.754245][ T2297] ? getname_flags+0xd6/0x5b0 [ 2170.758927][ T2297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2170.765208][ T2297] kmem_cache_alloc+0x62d/0x6f0 [ 2170.770088][ T2297] getname_flags+0xd6/0x5b0 [ 2170.774594][ T2297] __x64_sys_unlink+0x35/0x50 [ 2170.779275][ T2297] do_syscall_64+0x103/0x610 [ 2170.783885][ T2297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2170.789770][ T2297] RIP: 0033:0x457e29 [ 2170.793689][ T2297] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2170.813330][ T2297] RSP: 002b:00007f61a1f16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 2170.821751][ T2297] RAX: ffffffffffffffda RBX: 00007f61a1f16c90 RCX: 0000000000457e29 [ 2170.829715][ T2297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 2170.837679][ T2297] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2170.845662][ T2297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a1f176d4 [ 2170.853622][ T2297] R13: 00000000004c3a06 R14: 00000000004dc3c8 R15: 0000000000000005 05:05:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xfffffffe}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1ef, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:20 executing program 2 (fault-call:7 fault-nth:2): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x149, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) [ 2171.149760][ T2314] FAULT_INJECTION: forcing a failure. [ 2171.149760][ T2314] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.175280][ T2314] CPU: 0 PID: 2314 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2171.184235][ T2314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.194311][ T2314] Call Trace: [ 2171.197618][ T2314] dump_stack+0x172/0x1f0 [ 2171.201961][ T2314] should_fail.cold+0xa/0x15 [ 2171.206571][ T2314] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2171.212419][ T2314] ? ___might_sleep+0x163/0x280 [ 2171.217283][ T2314] __should_failslab+0x121/0x190 [ 2171.222231][ T2314] should_failslab+0x9/0x14 [ 2171.226740][ T2314] kmem_cache_alloc+0x2b2/0x6f0 [ 2171.231590][ T2314] ? __d_lookup+0x433/0x760 [ 2171.236095][ T2314] ? lookup_dcache+0x23/0x140 [ 2171.240791][ T2314] ? d_lookup+0xf9/0x260 [ 2171.245040][ T2314] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2171.250334][ T2314] __d_alloc+0x2e/0x8c0 [ 2171.254500][ T2314] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2171.260225][ T2314] d_alloc+0x4d/0x2b0 [ 2171.264229][ T2314] __lookup_hash+0xcd/0x190 [ 2171.268747][ T2314] do_unlinkat+0x2b2/0x6d0 [ 2171.273171][ T2314] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2171.278906][ T2314] ? __ia32_sys_rmdir+0x40/0x40 [ 2171.283761][ T2314] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2171.290059][ T2314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.296315][ T2314] ? getname_flags+0x277/0x5b0 [ 2171.301084][ T2314] __x64_sys_unlink+0x42/0x50 [ 2171.305769][ T2314] do_syscall_64+0x103/0x610 [ 2171.310367][ T2314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2171.316264][ T2314] RIP: 0033:0x457e29 [ 2171.320166][ T2314] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2171.339768][ T2314] RSP: 002b:00007f61a1f16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 05:05:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x7ffffffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2171.348182][ T2314] RAX: ffffffffffffffda RBX: 00007f61a1f16c90 RCX: 0000000000457e29 [ 2171.356174][ T2314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 2171.364143][ T2314] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2171.372114][ T2314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a1f176d4 [ 2171.380084][ T2314] R13: 00000000004c3a06 R14: 00000000004dc3c8 R15: 0000000000000005 05:05:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x4000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:20 executing program 2 (fault-call:7 fault-nth:3): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x40030000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2171.660061][ T2343] FAULT_INJECTION: forcing a failure. [ 2171.660061][ T2343] name failslab, interval 1, probability 0, space 0, times 0 05:05:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2171.711554][ T2343] CPU: 0 PID: 2343 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2171.720503][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.730558][ T2343] Call Trace: [ 2171.733852][ T2343] dump_stack+0x172/0x1f0 [ 2171.738192][ T2343] should_fail.cold+0xa/0x15 [ 2171.742786][ T2343] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2171.748596][ T2343] ? ___might_sleep+0x163/0x280 [ 2171.753445][ T2343] __should_failslab+0x121/0x190 [ 2171.758380][ T2343] should_failslab+0x9/0x14 [ 2171.762883][ T2343] __kmalloc+0x2dc/0x740 [ 2171.767131][ T2343] ? ovl_lookup_single+0x880/0x880 [ 2171.772239][ T2343] ? ovl_alloc_entry+0x25/0x70 [ 2171.777019][ T2343] ovl_alloc_entry+0x25/0x70 [ 2171.781605][ T2343] ovl_lookup+0x77f/0x1a10 [ 2171.786036][ T2343] ? ovl_path_next+0x2e0/0x2e0 [ 2171.790796][ T2343] ? find_held_lock+0x35/0x130 [ 2171.795566][ T2343] ? d_alloc+0x1f9/0x2b0 [ 2171.799809][ T2343] ? kasan_check_write+0x14/0x20 [ 2171.804751][ T2343] ? lock_downgrade+0x7d0/0x880 [ 2171.809613][ T2343] ? kasan_check_read+0x11/0x20 [ 2171.814464][ T2343] ? do_raw_spin_unlock+0x57/0x270 [ 2171.819575][ T2343] ? _raw_spin_unlock+0x2d/0x50 [ 2171.824424][ T2343] ? d_alloc+0x1fe/0x2b0 [ 2171.828669][ T2343] __lookup_hash+0x122/0x190 [ 2171.833271][ T2343] do_unlinkat+0x2b2/0x6d0 [ 2171.837692][ T2343] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2171.843411][ T2343] ? __ia32_sys_rmdir+0x40/0x40 [ 2171.848272][ T2343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2171.854527][ T2343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.860766][ T2343] ? getname_flags+0x277/0x5b0 [ 2171.865540][ T2343] __x64_sys_unlink+0x42/0x50 [ 2171.870224][ T2343] do_syscall_64+0x103/0x610 [ 2171.874826][ T2343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2171.880720][ T2343] RIP: 0033:0x457e29 [ 2171.884617][ T2343] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2171.904222][ T2343] RSP: 002b:00007f61a1f16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 2171.912640][ T2343] RAX: ffffffffffffffda RBX: 00007f61a1f16c90 RCX: 0000000000457e29 [ 2171.920618][ T2343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 2171.928596][ T2343] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2171.936569][ T2343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a1f176d4 [ 2171.944540][ T2343] R13: 00000000004c3a06 R14: 00000000004dc3c8 R15: 0000000000000005 05:05:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f0, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf0ff7f00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:21 executing program 2 (fault-call:7 fault-nth:4): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x80000001, 0x6, 0xd037, 0x7f]}) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x4, 0xffffffff, 0xad1, 0x1000, 0x0, 0x400, 0x5000, 0x4, 0x20, 0x1, 0x7, 0xfffffffffffffff7, 0x81, 0xffffffff80000001, 0x1, 0x10001, 0x3000000000000000, 0x1, 0x3000000, 0x40, 0x10000, 0x196, 0x5, 0x0, 0x2, 0x4, 0x75, 0x7, 0x400, 0x1, 0x0, 0x7, 0x8, 0xe5, 0x400, 0x8, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x8000, 0x0, 0x100000000, 0x5, 0x5, 0x7ff, 0x6}, r6, 0x9, r2, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x14a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf0ffffff7f0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x14b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf0ffffffffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2172.389134][ T2382] FAULT_INJECTION: forcing a failure. [ 2172.389134][ T2382] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.412921][ T2382] CPU: 1 PID: 2382 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2172.421902][ T2382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.431967][ T2382] Call Trace: [ 2172.435307][ T2382] dump_stack+0x172/0x1f0 [ 2172.439663][ T2382] should_fail.cold+0xa/0x15 [ 2172.444278][ T2382] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2172.450107][ T2382] ? ___might_sleep+0x163/0x280 [ 2172.455002][ T2382] __should_failslab+0x121/0x190 [ 2172.459959][ T2382] should_failslab+0x9/0x14 [ 2172.464500][ T2382] kmem_cache_alloc+0x2b2/0x6f0 [ 2172.469361][ T2382] ? finish_task_switch+0x146/0x780 [ 2172.474578][ T2382] ? find_held_lock+0x35/0x130 [ 2172.479355][ T2382] __d_alloc+0x2e/0x8c0 [ 2172.483530][ T2382] d_alloc+0x4d/0x2b0 [ 2172.487526][ T2382] ? _raw_spin_unlock_irq+0x28/0x90 [ 2172.492736][ T2382] d_alloc_parallel+0xf4/0x1bc0 [ 2172.497624][ T2382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2172.503895][ T2382] ? refcount_sub_and_test_checked+0x154/0x200 [ 2172.510069][ T2382] ? __d_lookup_rcu+0x6c0/0x6c0 [ 2172.514937][ T2382] ? __d_lookup+0x40c/0x760 [ 2172.519478][ T2382] ? lockdep_init_map+0x1be/0x6d0 [ 2172.524582][ T2382] ? lockdep_init_map+0x1be/0x6d0 [ 2172.529624][ T2382] __lookup_slow+0x1ab/0x500 [ 2172.534230][ T2382] ? vfs_unlink+0x560/0x560 [ 2172.538764][ T2382] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2172.544074][ T2382] ? d_lookup+0x19e/0x260 [ 2172.548428][ T2382] lookup_one_len+0x16d/0x1a0 [ 2172.553128][ T2382] ? lookup_one_len_unlocked+0x100/0x100 [ 2172.558789][ T2382] ovl_lookup_temp+0x114/0x1a0 [ 2172.563568][ T2382] ? ovl_set_upper_acl+0x100/0x100 [ 2172.568694][ T2382] ? lookup_dcache+0x6d/0x140 [ 2172.573405][ T2382] ? lookup_one_len+0x10e/0x1a0 [ 2172.578270][ T2382] ? lookup_one_len_unlocked+0x100/0x100 [ 2172.584005][ T2382] ovl_cleanup_and_whiteout+0x48/0x1e0 [ 2172.589482][ T2382] ovl_do_remove+0xaf8/0xd70 [ 2172.594090][ T2382] ? ovl_rename+0x1940/0x1940 [ 2172.598782][ T2382] ? vfs_unlink+0xd1/0x560 [ 2172.603220][ T2382] ovl_unlink+0x18/0x20 [ 2172.607387][ T2382] vfs_unlink+0x2d8/0x560 [ 2172.611732][ T2382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2172.618024][ T2382] do_unlinkat+0x3f7/0x6d0 [ 2172.622460][ T2382] ? __ia32_sys_rmdir+0x40/0x40 [ 2172.627330][ T2382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2172.633586][ T2382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2172.639840][ T2382] ? getname_flags+0x277/0x5b0 [ 2172.644625][ T2382] __x64_sys_unlink+0x42/0x50 [ 2172.649316][ T2382] do_syscall_64+0x103/0x610 [ 2172.653928][ T2382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2172.659832][ T2382] RIP: 0033:0x457e29 [ 2172.663735][ T2382] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2172.683354][ T2382] RSP: 002b:00007f61a1f16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 2172.691776][ T2382] RAX: ffffffffffffffda RBX: 00007f61a1f16c90 RCX: 0000000000457e29 [ 2172.699744][ T2382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 2172.707719][ T2382] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2172.715708][ T2382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a1f176d4 [ 2172.723679][ T2382] R13: 00000000004c3a06 R14: 00000000004dc3c8 R15: 0000000000000005 05:05:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f1, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x100000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:21 executing program 2 (fault-call:7 fault-nth:5): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:21 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(0xffffffffffffffff, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000003c0)={0x19980330, r4}, &(0x7f0000000400)={0xf990, 0x3f, 0x4, 0x0, 0x7, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/229, 0x2}) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) [ 2172.997290][ T2405] FAULT_INJECTION: forcing a failure. [ 2172.997290][ T2405] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.019688][ T2405] CPU: 0 PID: 2405 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2173.028648][ T2405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.038730][ T2405] Call Trace: [ 2173.042049][ T2405] dump_stack+0x172/0x1f0 05:05:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2173.046401][ T2405] should_fail.cold+0xa/0x15 [ 2173.051038][ T2405] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2173.056888][ T2405] ? ___might_sleep+0x163/0x280 [ 2173.061749][ T2405] __should_failslab+0x121/0x190 [ 2173.066688][ T2405] ? ratelimit_state_init+0xb0/0xb0 [ 2173.071880][ T2405] should_failslab+0x9/0x14 [ 2173.076392][ T2405] kmem_cache_alloc+0x2b2/0x6f0 [ 2173.081274][ T2405] ? _raw_spin_unlock+0x2d/0x50 [ 2173.086141][ T2405] ? d_splice_alias+0x506/0xcc0 [ 2173.091034][ T2405] ? ratelimit_state_init+0xb0/0xb0 [ 2173.096247][ T2405] ext4_alloc_inode+0x1f/0x640 [ 2173.101042][ T2405] ? ratelimit_state_init+0xb0/0xb0 [ 2173.106255][ T2405] alloc_inode+0x66/0x190 [ 2173.110595][ T2405] new_inode_pseudo+0x19/0xf0 [ 2173.115295][ T2405] new_inode+0x1f/0x40 [ 2173.119384][ T2405] __ext4_new_inode+0x37e/0x5450 [ 2173.124327][ T2405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2173.130565][ T2405] ? ext4_free_inode+0x1450/0x1450 [ 2173.135666][ T2405] ? make_kprojid+0x30/0x30 [ 2173.140289][ T2405] ? dqget+0x10d0/0x10d0 [ 2173.144524][ T2405] ? from_kgid+0x86/0xc0 [ 2173.148769][ T2405] ? from_kuid_munged+0x130/0x130 [ 2173.153797][ T2405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2173.160037][ T2405] ext4_mknod+0x23c/0x5f0 [ 2173.164378][ T2405] ? ext4_add_nondir+0x90/0x90 [ 2173.169152][ T2405] ? security_inode_permission+0xd5/0x110 [ 2173.174868][ T2405] ? inode_permission+0xb4/0x570 [ 2173.179797][ T2405] ? ext4_add_nondir+0x90/0x90 [ 2173.184550][ T2405] vfs_whiteout+0x306/0x3d0 [ 2173.189047][ T2405] ovl_cleanup_and_whiteout+0x77/0x1e0 [ 2173.194498][ T2405] ovl_do_remove+0xaf8/0xd70 [ 2173.199082][ T2405] ? ovl_rename+0x1940/0x1940 [ 2173.203744][ T2405] ? vfs_unlink+0xd1/0x560 [ 2173.208155][ T2405] ovl_unlink+0x18/0x20 [ 2173.212346][ T2405] vfs_unlink+0x2d8/0x560 [ 2173.216665][ T2405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2173.222910][ T2405] do_unlinkat+0x3f7/0x6d0 [ 2173.227332][ T2405] ? __ia32_sys_rmdir+0x40/0x40 [ 2173.232219][ T2405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2173.238452][ T2405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2173.244693][ T2405] ? getname_flags+0x277/0x5b0 [ 2173.249453][ T2405] __x64_sys_unlink+0x42/0x50 [ 2173.254121][ T2405] do_syscall_64+0x103/0x610 [ 2173.258705][ T2405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.264584][ T2405] RIP: 0033:0x457e29 [ 2173.268511][ T2405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2173.288102][ T2405] RSP: 002b:00007f61a1f16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 05:05:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x200000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000200)={0x1, 0x800000000000000, 0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x105) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x14c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2173.296502][ T2405] RAX: ffffffffffffffda RBX: 00007f61a1f16c90 RCX: 0000000000457e29 [ 2173.304462][ T2405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 2173.312473][ T2405] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2173.320436][ T2405] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a1f176d4 [ 2173.328396][ T2405] R13: 00000000004c3a06 R14: 00000000004dc3c8 R15: 0000000000000005 05:05:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:22 executing program 2 (fault-call:7 fault-nth:6): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2173.454290][ C1] net_ratelimit: 20 callbacks suppressed [ 2173.454297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.465811][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2173.471652][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.477454][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2173.483267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2173.489082][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2173.494916][ C1] protocol 88fb is buggy, dev hsr_slave_0 05:05:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xa00000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2173.500675][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f2, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x14d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x1100000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:22 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x3f00000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2174.014296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2174.020133][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x60d1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x1, 0x4, 0xb86, 0x6, 0x1}, 0x14) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:23 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000240)='./bus/file0\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000002c0)={0x7, 0x1, 'client1\x00', 0x5, "0bbf29f724bad5aa", "5c3267d812994e54bb9c8a61b112974a2d760f20456e501736524c9e1f10fe50", 0x1f, 0x180}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r2}) 05:05:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x14e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x4a03000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2174.228033][ T2494] overlayfs: './file0' not a directory [ 2174.254937][ T26] audit: type=1804 audit(1551589523.172:472): pid=2491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir291748992/syzkaller.Cqx5PT/3386/file0/file0" dev="overlay" ino=346849 res=1 [ 2174.344050][ T26] audit: type=1804 audit(1551589523.222:473): pid=2491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir291748992/syzkaller.Cqx5PT/3386/file0/bus" dev="overlay" ino=346849 res=1 05:05:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f3, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x803e000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x14f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:23 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x7f, 0x4) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() fcntl$getown(r0, 0x9) setpgid(r5, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x100000000) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 05:05:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x150, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xc000000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2174.789138][ T2519] overlayfs: filesystem on './file0' not supported as upperdir 05:05:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:23 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003680)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000003780)=0xe8) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x7, 0xa, &(0x7f0000003580)=[{&(0x7f0000000180)="e8f1c7a132f2b3274222b06aa0fd185e28704b01fc50d7d9d4a50a0cb34dea12622cff3a690bea53bbdd6478f6dc31c4e1f2b400905545e2", 0x38, 0xfffffffffffffff8}, {&(0x7f0000000400)="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", 0x1000, 0xbcf}, {&(0x7f00000001c0)="abecc578b5cf024da7d2e7325be25c7c3ba0fc92ac527eeb23f62cbdf48ea8", 0x1f, 0xfffffffffffffe00}, {&(0x7f00000002c0)="13888910cc61400ae974975bbbf433a1f8ffeaecdfc2e4086a279e984f370cbe13ca79802d7d387cecb0f56afb66f476b255c8865963a6f75da9b05685d23b07e17e48c9c564addb4f4298f4a16d9826ff79a96d31d82fd3f427dbb9957b1d8224a7b53372fd501b23472a339009921b853945ca6e38db49421774da3369e80bc34c749ce9347e4e2cee0dd8e81d5fb5fbef78128fc24ef17b928bf5262c3ff1090898b22e67ff3dfbf301ad5949338434a4c3a28a3a91ecb8450c6a756e221a954a439e8a47f64e8c71772da2534be1c3b33d89c458a1619c004d96b4fb44d67d96ed9ce0450ca665a8", 0xea, 0x200}, {&(0x7f0000000240)="ef14f8955e5123", 0x7, 0x80000001}, {&(0x7f0000001400)="dec7c2be0bb3b51882fe657347385d50af4a655a56483e66b37d3f5b8f2652f2432ef43432e1f21636eedc36202fb43e8604f4f10a1cbabf9e0a4833a09d11b11d14424f2c3bffa8f0c136aa37c339b97c41d01488cdffccac6e505a9139951fc16433016dd12b2b18f84fab7d16f47a3378f1522eb99a39f34118441167bb366f87f06b03e8213ecfcc7367bc85b7", 0x8f, 0x9}, {&(0x7f00000014c0)="f8fb18eaef59979240c88fae29f7c81210dfa6ee1eb5e3d8320fdb3ec1037ab17c8923136e493e4c1e999d431759684c4e1ac2241cb69b2e4feb464373ee5d2e793e5948751cd8f248b2a5ebb9ceb11f6a604cb46cacc331bda31cb680e3e82c7c351cb8ec204513398f920ac0c1c869b39c68a9331be15d5e96d72e89875bff926e7f355151110935d295dd5a13604a016620800429b83db5c70af94da020f85aa7e6393b830908620f21e3812f9106af66111df56b29cc5b0540c642aec5c60a4428606b20bdc04d4a86dd82dafdfc655b87a1a1f252902381fe83483b6b9570c37a4f040ebf489074a8b0b16d3edfae04345a358ff7662f418fd32ee7c9ac9878c4a2087a493bce80bc698adebcc0f8ed9c86831559103baef968defdebefedc975220ba1d98a8d6581d98fdc26c2dcb01a2ca58acf7891e807d51f619b80c0294e2b0d2879e7a2ebd47ac2c21a4b3c522777a82b18c76b5a416839ab4944ab608779f45db5ccc96fd284b5bddedb2e298f66eb7055ead6db19cd9cad790e751e12d6cb4db12ba0fd211f24d713cc77bf11d3813214c547be96ee7fbcb06097971a1cc4daa64f2b52a74f05f305c812313f170dc0cb101052231978e081b502904dd6bf7c95b45c39cd03854e627adf8d438ed3b3591b10fc94eb38d8223b6318d8c6fc3118a48366aff2b87a1d5eaca7b15786253d738616799ca1bb8af99e4d0e7c8dd52d08184d56d2225b23c8558839fb4c403e82f54ac28d7e13acbb8da55cede0144fee30fc122d694bcf161a05c1c4ce89b8cd05c0de732bbe95c0fbcff13370b6f28aae0170f8412249bdbe90f6c193caad31dea7c8d8e840211347543c16d03fbd5890fb096b6002bd5924514ea62ed735e7dba5ae9387306f5a65513cfeaf2abc7383731e312604f9c82937432e8d667c0016e640940d81068c0bd10786ef59255d77ecaa4fbc30db1bc0e34c87c8870c64f347082832ed1f82fe2fea2c3853d305a0a25de4da404935516a3980f1a0d9f34a3368578ae14df4e95fc294e0e5bc8feda6daefff992323a28499dcf0b56ecd6c8d60fc92d972770592e0edda902da082a8fafacc33c23a5fb06b04e8b7a2880e58149981e8212e0d7ee8a51c0a008bcc7c2844677b0f11161446fedf32a5726f2e805a69d4e03fda9555c6d28dd14841ae718fe16a9d44c5302926c2671d22cc3ed49edf0acfe1368332ff3bdc057cb19b1053b6a4011a01e3dbc02b2a50f8068a63e7684cf2aa239a735a470762c34d5d7e3e6faef24c0b7f7de1887fa24e5b8b493d92c284baf177635056074e1eeceb61025727cd42df3248b0b1072191b8b855e4fa0675867b485c40e47e53d5d4c5cbbee611c94dab8d95d69d8d3daae0ba6ff991544fbf53634105cea3cc7af06b528c2f9daec4b4fa3243c7f5aa034d849559acaff9babbbda05db79705991f14dd65ef98a185a945aaedaea6a13df3a6c172db4ee9c4caac862a807e6bfec2dc5b9ae7e46301bb500cbc58752511886167611d89b7732aeedb432ff7d728d91f2139d586338ce68beddceb1000585fbb4b124b6c633c91d3adb7fcef7036702210f7f903d224696f7e7e3f7a5ffbc673288e6662608ebf5dd1bbd47a1880f519b8cc3237620db0e45f42e3ffd568832bd1a9fc056fee1bfcb2ed987b095150cc838b60db80434ae738f71a04382dc5b5c34943783b14971b4919ef6e60b28cc223b5e6b86099d8caee8a1819662f7b825853ee556c2f9ee88b45015a00c11effeb96fe8b1c78f79792ce6b4aa4e26131005f0e362ab995bc81229ded5221f0f8d3518a87caba9e084469e5c3fbf8e1283c10530f1ba0b49471e24181ab42df518a9cb324833b2e042d78cb5971b6322a34e67b34d84c607ee4eca2140413b8635167fa41ad5af7c3cbcbf99ec543b6391bb41248fe381fc679c86c18b1830059b517460da6c2ecfcd7966e9f787f8f84bc92df1b31e0a352149a893f052b77efb88f0a767476a3055bb0ed7aed88af767321a113763da205aa31cfb4481616f4bbb3149949341f45237555b59dd58f256b63952fbdb6c67ce674d42080e9c8d6087aee45923cf872dc75434066673cefa98b01d86283334c2435927bdcb38df9c0c802e1a177af1cca13c4a4a95c4d683d7d5982460eef5be7e9d5ba6990cec2345787dc7909ecde6c322abf7e0bd946dcce58ff0e4602fa4928e73899cfbdade622221d5dc62d4a6a0f707f2c8cfc4f4a1cf002e4d79e6f09fb1b97d4622285b7638329f98d4793c2ace14c1852974dbcfd16f4fb681897208363fe38e457949f0b4db4cda87ec9b4276e0e56a52ac1cc90652fd1706f73275814da9e3a5bea1ea376421ded30af0f6d10af518e8ddf50d619c2e99e657e498ba8c5a2c7a7d1af49a8d49f5dc990e19542d00da7d26207061f77d6da08ccfc1f65c5eb0df8a01c65666853262645fb26ee331c475df1656fdd4ed45299c92eb0f05bc15c80f4bcdcc364e61367928e083567e460df5ea2bccd71d0bd74620a628ecef5f928d0f39d59dac591f5285202ed0de72f46910c77d0c2f0102536f75ca18a710bcdfdfbc386b899e710f18561424d6814521601d4788f4cfcafb88f6b6971404a8be7e648a80d7bdb6e313d7546bf79359423e5c699ade38f49c8b55f99346e094a6b9f4784e0af9a715c0106465ef6190d94a4f21b6954813cf0abf6a91a5036f6b55d80b5e96a00759decf2b28691d06490d19ad84f8f7d6b159cb18215c209f1de464a17c71ce062314a42296d095900c386c191a60dbe2442584eaef4530d0187794e13c53ac3d7e0636bbfde457a92b432fc809748f6793be08465f45f933616816fe551c57757f47a1b2adde371d2f4155def3aa1891812c45ebd7e7efb559a11b75616a6ef0397d75f182ca4851e943489cc16918c0edc9d26236ef7b0054f0bfabd63fee98301ab3a9c08f1adfb7689fd9ce93bcd33352617dd1f01f50d12de03b61a07fc1879cc540f12cd8db2c86540cbef1b6b37561a132faf5048f7c87b6da213b6cf6db5fbe01e173f484f2739f7469327b195ba85e83fe02eb4c7f3b6c710792f81cba6ff1c75d5a64c8540d14e8399c1096f7e98088986e9b3561bf354c3d1dcd7102dc17efd9a685956aedb5d3e132f347883b4ad40615260eda0cfd4755f4e8b88d96ac75d04997ecfcd18df7ee536a937fe3878465d18a165b157a83f9d8479a688a8f133b783ec7387ec9b31cff02bf5a18022e1cda48b42813dbd328f976a19faa8072eca25505d5da1312e2cf1aebc00b73d2504399c253bf99af1203db7d10a028c5a3fb655a26abee84991b598b2b1b29b965e6472a1b7534c6282fca360c23e5c7fc180e054b0cfac7486d87b5e23dc5b23050cf65ea665bf1a918111938a58082116de97d904404b2f9324dc0564119c6a8f230c454aeac0afdf7a37a21a1cc836a7f480cac8c82f565d75df3a5b12698db62032346c897a5bfe752f3badf3dfc803bb7dd63be28d02a761259fc68d5ab26ca3b2c4f5f5603dedada1917a89fb0b377b5ff59293ea3dc9e18b7c34cf13e1ae3a8f332c4ecec9e9e5ab4723f0eafed72d7d31364b30f7ce1bf08f433a2a06f6c075cab9d104624eb0525c40e3a98fea26a54ec942cf643f4ebbad714956fc81d827d8d6acb5f668f0c98e1f6b761b6a7fcc5158377a323a17b7f2b18f6881b9d3ed6c23daa43a0e080d8d2dcddd797acf3666b7154387040b15b62520fbdafdbcd67b666726c31a76db133682f487c78b2a8a922f32d6ab1d8fed31b07c7719c6e4e6e5fffdaf2e7ca7ddb19faea55c3d1e83ce4886a9ebacad6dc932f9e7379d0293a9cb7e495d598e5806b0227b5b44d2fa9aac556a7669ad8556c1238e194bb34652a884a0b877ceda9ba6ac72f2b4f2dafeed3cf3659f425b1762c8db39eb4252ab59a3646d4aad317c5044e988fac0d0057bd1688af3552ae02c7a70e88a8499258b0f02d4a52c1e51c138c56e4f1723a6161017928329d611ed240be24b13461d9db72eb3cbd6951838a75b95ffa7f5f0b62b9a2d1227c8c698b1d3340be57da9017618b7b4be409ba2c21f04a5467458bf0c732a3afeae0d4faeaa1e0512b7a37548d21e6f24105e2c4ec6004d19331d979653b5c932dbca74a8f9c164b066842d20521463ef99f0bd0abc2d6e684ea5ce488e64c62f598f4c350c09cedfd6d71baa08a68f0d70ab25b2bb6718f1b36256400521d9b7b13462d4288752a2796059c6e6eb87fd37de5ee2396db024b7879ed817c5947d33ec38113b95fff93dc4be9c1b6d9c425d77df9870d0bab60a1bdab000d94c850844e5ddfa09ba2f2c597fd6cfdeb92e031ebff47d2b6661bf7bb28db663f945f2abac74a46821140d190654fec53315a35f0cf95b864140a5d908da810f3e470a642c1a55952533d443bf7f147fd9594ab9b1978901b13c1cc8d9f84533a843017ac5a9b9e0797000465d215a247d963e91b6df99d1c353dbfa72da8720da1c965ab529d09e2726f0e0d28efe437e575247418f12788db5099dfe605b6acb55a128593ec4901ada8c294909579772535c276dc5afdc403596ec1aa2ae14bb453290a6ffaf773d94581b89195b7bfcecee3429e99cb3b2dd35a8922f72047a752ee85bd6fb0051960ab6844d06946d722ed39add6e79b483c8864a6888c81b090c9071c6d00dd24d60d69a240e5a68a48bb96660393edcb5c9d8afe94d398b3f84c4414e0dc8deadb368ff53462d32d4e199571e66585bfc13fa55f9b99e088f2c0528e73347c994ecff7d6c47ccbc70c35aa815a25056f5384f14270a07d503397633217f13854a61a7d8dbcdeb5fc694c2b28a1809f79d16175675b3de4d53a82cb6c2c1e4e50a7178b1a18d53f76f34ce0110bed0461c17a70b6cbb116a461eeaf915c31e5d0a5e0a1416180f280bf144eb784269d78f334b35bd3391952061acd617e4b5eef7d80c34edc11d39cca35ede6dfffd9171b1f0b1dcce24aed8b762dc22ab0064186163c9e443d5f31466ecf217046a69a03bd8fe13b2cdc3c6027b08a7e73d588b5ae431530e17d68bb431422c2ee8ff86b0b6169f45e7121ad9ed8e8ee88be15515239f95d5d536c21ee3a77bbbbeed953452401718dbaa65c019aa93b4655299c0d297716756e166060b9e98b7edfed3b0c6af7d469351c5b4a938a31f5d7f824fb725e405c436d821f96bb04de57545c514358f3fc6315271403657f33a1d04b61d6b553ae7f3f0b3b425114803248be37a5232b0cc9a01d360e957a6e3031b60d6271fec946bb5ffd0818216755b79d338035a49c0532986b6eda559bcdad7d5916d90e1b127d4b2188c6fe9a808c9f14be7bb0e9b3acf265987af0c27238252837eb01f4d7c001ff8f2ef9a39b66db65fc3244f0f2a943dbf2ab7a81f45f6c985e155aa242120ee6f41b8832772ef777587df68ca5c081c5b31f2a46c7c57a139cf711b42d4004e03d72a429a6816fea75211994f4a65aa79baa37b0d54f74cb89f47ab864dd9385bf7190c69e91b200b3a1f3a8360edf678d26ea58a3a5eaa4aebbdd8af38dc7f1b0a71e2fc12495bfea1731d9104bb9d634779792c9229adc5687bbd719b12ebc95f9cb04f3631ff0b1725f342761ff6db9c59591298108a60e799fe6c3d5e5c7c768ca7fdd93b6a75fd3127c198a42c33f201959cbfbd21ac14d045a986e7eb384106ae5059f0ef2c06206f2f05d00068da4e53ceb27a41a3ec750e050b6f9e2869467f52443a295df03ac18a949b", 0x1000, 0x100}, {&(0x7f00000024c0)="cb75db33771a1bd929386d207fae7841ff4315e6404582ccc486256d711f4bfbab6248fda1960066fbc831ef35de2e4753159e96c91a8b622b26832ba6b3c979c78c96e68c64b1519d91be0de5ad90d04acc52146f4d4f544102de5664f44400515f4936100f141f39a50057a410ea14c0e930a5eac912", 0x77, 0xffffffffffffff81}, {&(0x7f0000002540)="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", 0x1000, 0x8}, {&(0x7f0000003540)="060dbeb09cf35fde1c36495b1588cc", 0xf, 0xfffffffffffffffb}], 0xc000, &(0x7f00000037c0)={[{@fat=@showexec='showexec'}, {@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}, {@fat=@showexec='showexec'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_winnt='shortname=winnt'}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}], [{@dont_measure='dont_measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x77, 0x39, 0x3d, 0x30, 0x66, 0x0, 0x37], 0x2d, [0x32, 0x33, 0x3f, 0x62], 0x2d, [0x33, 0x63, 0x37, 0x33], 0x2d, [0x0, 0x64, 0x64, 0x3b], 0x2d, [0x32, 0x66, 0x61, 0x65, 0x35, 0x37, 0x7d, 0x33]}}}, {@euid_lt={'euid<', r0}}]}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c006430e03cee1f7049eaf86b221dedda3a9b0b80bb9ea0a09a65a536d77d703f5302465763d654dae5d450d30497ded58ae99615d12ef8d563aaca921a04fa5c1b670a35484dcd06855b7f8dc468d2eb97e70358de7740c595976e08bc092e60b4fa81b0a30452bba16d9611093947af0b356db4e0e1188242daa8f5754f9981c88581f4b1dfe6c148a323224a4f75"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xc03e000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2175.075325][ T2551] overlayfs: filesystem on './file0' not supported as upperdir 05:05:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f4, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xe03f030000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:24 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x80, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xfffffffffffffffc}}, {@sq={'sq', 0x3d, 0xffffffff}}], [{@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r0}}, {@subj_user={'subj_user', 0x3d, 'upperdir'}}, {@smackfshat={'smackfshat', 0x3d, 'lowerdir'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'lowerdir'}}, {@subj_type={'subj_type'}}]}}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0000fcff0712c2c1410bdcd59909f17a5b460ec2f562610e6f58e45dcb4f23710f9b5fc915f905a559c7ed396cf256811b8e27b8625b4e1113b35e261bbcb2a9f29ab713ff4d454a9fd5b96eab6be9c92ed769eef4d974d2d1b5b3407ee9a51526e27c03fbd5d43af39250c792dbd6257be350b09337ed7eb40b95d199102216a59d644de96c9aef1461749b79aff37086e8ee92f2d63149361ef66c07b69e9d92ce44c35e95e95aa7e8a3083c4b3d161e524d42ae497e1cb9023f70f5f28fb73a36814dffd4dc5a"], &(0x7f0000000240)=0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xe826000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x151, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2175.689463][ T2574] overlayfs: filesystem on './file0' not supported as upperdir 05:05:24 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065842a38408be901620e77726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b646972"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2175.745796][ T2564] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2175.768081][ T2564] CPU: 1 PID: 2564 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2175.777038][ T2564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.787096][ T2564] Call Trace: [ 2175.790399][ T2564] dump_stack+0x172/0x1f0 [ 2175.794760][ T2564] dump_header+0x10f/0xb6c [ 2175.799193][ T2564] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2175.805038][ T2564] ? ___ratelimit+0x60/0x595 [ 2175.809645][ T2564] ? do_raw_spin_unlock+0x57/0x270 [ 2175.814780][ T2564] oom_kill_process.cold+0x10/0x15 [ 2175.819914][ T2564] out_of_memory+0x79a/0x1280 [ 2175.824783][ T2564] ? lock_downgrade+0x880/0x880 [ 2175.829633][ T2564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2175.835888][ T2564] ? oom_killer_disable+0x280/0x280 [ 2175.841098][ T2564] ? find_held_lock+0x35/0x130 05:05:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xeffdffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2175.845882][ T2564] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2175.851439][ T2564] ? memcg_event_wake+0x230/0x230 [ 2175.856484][ T2564] ? do_raw_spin_unlock+0x57/0x270 [ 2175.861611][ T2564] ? _raw_spin_unlock+0x2d/0x50 [ 2175.866481][ T2564] try_charge+0x118d/0x1790 [ 2175.871033][ T2564] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2175.876592][ T2564] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2175.882151][ T2564] ? find_held_lock+0x35/0x130 [ 2175.886924][ T2564] ? get_mem_cgroup_from_mm+0x10b/0x2b0 05:05:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x152, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xf6ffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2175.892487][ T2564] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2175.898050][ T2564] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2175.903264][ T2564] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2175.908826][ T2564] __memcg_kmem_charge+0x136/0x300 [ 2175.913953][ T2564] __alloc_pages_nodemask+0x437/0x7e0 [ 2175.919356][ T2564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2175.925610][ T2564] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2175.931362][ T2564] ? vm_mmap_pgoff+0x1d4/0x230 [ 2175.936144][ T2564] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2175.941879][ T2564] ? do_huge_pmd_anonymous_page+0x420/0x1730 [ 2175.947883][ T2564] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2175.954142][ T2564] alloc_pages_current+0x107/0x210 [ 2175.959275][ T2564] pte_alloc_one+0x1b/0x1a0 [ 2175.963809][ T2564] __pte_alloc+0x20/0x310 [ 2175.968150][ T2564] __handle_mm_fault+0x3391/0x3ec0 [ 2175.973274][ T2564] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2175.978834][ T2564] ? find_held_lock+0x35/0x130 [ 2175.983615][ T2564] ? handle_mm_fault+0x322/0xb30 [ 2175.988579][ T2564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2175.994838][ T2564] ? kasan_check_read+0x11/0x20 [ 2175.999705][ T2564] handle_mm_fault+0x43f/0xb30 [ 2176.004489][ T2564] __do_page_fault+0x5ef/0xda0 [ 2176.009266][ T2564] do_page_fault+0x71/0x581 [ 2176.013767][ T2564] ? page_fault+0x8/0x30 [ 2176.018021][ T2564] page_fault+0x1e/0x30 [ 2176.022171][ T2564] RIP: 0033:0x40f98f [ 2176.026067][ T2564] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2176.046049][ T2564] RSP: 002b:00007fffc51663f0 EFLAGS: 00010206 [ 2176.052102][ T2564] RAX: 00007fd54e1ce000 RBX: 0000000000020000 RCX: 0000000000457e7a [ 2176.060073][ T2564] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2176.068036][ T2564] RBP: 00007fffc51664d0 R08: ffffffffffffffff R09: 0000000000000000 [ 2176.076019][ T2564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc51665b0 [ 2176.084117][ T2564] R13: 00007fd54e1ee700 R14: 0000000000000005 R15: 000000000073bfac [ 2176.105073][ T2564] memory: usage 306816kB, limit 307200kB, failcnt 1949 [ 2176.124417][ T2564] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2176.138188][ T2564] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2176.149248][ T2600] overlayfs: unrecognized mount option "uppe„*8@‹ébwrdir=./file0" or missing value [ 2176.161271][ T2564] Memory cgroup stats for /syz4: cache:32KB rss:161772KB rss_huge:151552KB shmem:132KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:12KB active_anon:161680KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2176.175493][ T2601] overlayfs: unrecognized mount option "uppe„*8@‹ébwrdir=./file0" or missing value [ 2176.193103][ T2564] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2564,uid=0 [ 2176.213799][ T2564] Memory cgroup out of memory: Killed process 2564 (syz-executor.4) total-vm:72576kB, anon-rss:4208kB, file-rss:34816kB, shmem-rss:0kB [ 2176.241772][ T1044] oom_reaper: reaped process 2564 (syz-executor.4), now anon-rss:0kB, file-rss:34648kB, shmem-rss:0kB 05:05:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f5, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xfeffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:25 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x4, 0x2) 05:05:25 executing program 4: socket$inet6(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) inotify_init1(0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000340)={0x2, 0x2000000000000, 0x6, 0x5, 0x2000000000002}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) read$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0)='sit0\x00', 0x8) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x361) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = getpid() r9 = fcntl$getown(r4, 0x9) setpgid(r8, r9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:05:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:25 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c97dedc795ae7fae73700529585cc65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2176.516723][ T2617] overlayfs: filesystem on './file0' not supported as upperdir 05:05:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xffffff7f00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2176.659042][ T2631] overlayfs: failed to resolve './fil—ÞÜyZçúç7': -2 05:05:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x153, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2176.719957][ T2636] overlayfs: failed to resolve './fil—ÞÜyZçúç7': -2 05:05:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xffffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2177.066384][ T2634] syz-executor.4 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2177.081757][ T2634] CPU: 1 PID: 2634 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2177.090707][ T2634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.100773][ T2634] Call Trace: [ 2177.104077][ T2634] dump_stack+0x172/0x1f0 [ 2177.108420][ T2634] dump_header+0x10f/0xb6c [ 2177.112845][ T2634] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2177.118784][ T2634] ? ___ratelimit+0x60/0x595 [ 2177.123382][ T2634] ? do_raw_spin_unlock+0x57/0x270 [ 2177.128501][ T2634] oom_kill_process.cold+0x10/0x15 [ 2177.133615][ T2634] out_of_memory+0x79a/0x1280 [ 2177.138388][ T2634] ? lock_downgrade+0x880/0x880 [ 2177.143243][ T2634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2177.149480][ T2634] ? oom_killer_disable+0x280/0x280 [ 2177.154680][ T2634] ? find_held_lock+0x35/0x130 [ 2177.159451][ T2634] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2177.165019][ T2634] ? memcg_event_wake+0x230/0x230 [ 2177.170062][ T2634] ? do_raw_spin_unlock+0x57/0x270 [ 2177.175183][ T2634] ? _raw_spin_unlock+0x2d/0x50 [ 2177.180088][ T2634] try_charge+0x118d/0x1790 [ 2177.184602][ T2634] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2177.190150][ T2634] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2177.195693][ T2634] ? find_held_lock+0x35/0x130 [ 2177.200461][ T2634] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2177.206041][ T2634] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2177.211675][ T2634] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2177.216865][ T2634] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2177.222452][ T2634] __memcg_kmem_charge+0x136/0x300 [ 2177.227574][ T2634] __alloc_pages_nodemask+0x437/0x7e0 [ 2177.232965][ T2634] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2177.238765][ T2634] ? __kmalloc_node+0x3d/0x70 [ 2177.243440][ T2634] ? kasan_unpoison_shadow+0x35/0x50 [ 2177.248730][ T2634] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2177.255017][ T2634] alloc_pages_current+0x107/0x210 [ 2177.260136][ T2634] __vmalloc_node_range+0x4b0/0x790 [ 2177.265352][ T2634] ? __kvm_set_memory_region+0xb6b/0x20f0 [ 2177.271095][ T2634] __vmalloc_node_flags_caller+0x71/0x90 [ 2177.276735][ T2634] ? __kvm_set_memory_region+0xb6b/0x20f0 [ 2177.282472][ T2634] kvmalloc_node+0xdc/0x100 [ 2177.287022][ T2634] __kvm_set_memory_region+0xb6b/0x20f0 [ 2177.292578][ T2634] ? kvm_clear_dirty_log_protect+0x840/0x840 [ 2177.298567][ T2634] kvm_set_memory_region+0x2f/0x50 [ 2177.303672][ T2634] kvm_vm_ioctl+0x75e/0x1900 [ 2177.308263][ T2634] ? __lock_acquire+0x548/0x3fb0 [ 2177.313208][ T2634] ? kvm_unregister_device_ops+0x70/0x70 [ 2177.318834][ T2634] ? delayacct_end+0xc9/0x100 [ 2177.323505][ T2634] ? __lock_acquire+0x548/0x3fb0 [ 2177.328458][ T2634] ? psi_memstall_leave+0x11c/0x180 [ 2177.333657][ T2634] ? tomoyo_domain+0xc5/0x160 [ 2177.338339][ T2634] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2177.344595][ T2634] ? tomoyo_init_request_info+0x105/0x1d0 [ 2177.350338][ T2634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2177.356587][ T2634] ? tomoyo_path_number_perm+0x263/0x520 05:05:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f6, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:26 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x42000) unlink(&(0x7f0000000000)='./file0\x00') 05:05:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0xfffffffffffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2177.362228][ T2634] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2177.368057][ T2634] ? __fget+0x35a/0x550 [ 2177.372238][ T2634] ? kvm_unregister_device_ops+0x70/0x70 [ 2177.377888][ T2634] do_vfs_ioctl+0xd6e/0x1390 [ 2177.382501][ T2634] ? ioctl_preallocate+0x210/0x210 [ 2177.387629][ T2634] ? __fget+0x381/0x550 [ 2177.391808][ T2634] ? ksys_dup3+0x3e0/0x3e0 [ 2177.396243][ T2634] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 2177.402329][ T2634] ? tomoyo_file_ioctl+0x23/0x30 [ 2177.407372][ T2634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2177.407390][ T2634] ? security_file_ioctl+0x93/0xc0 [ 2177.407409][ T2634] ksys_ioctl+0xab/0xd0 [ 2177.407428][ T2634] __x64_sys_ioctl+0x73/0xb0 [ 2177.407448][ T2634] do_syscall_64+0x103/0x610 [ 2177.407469][ T2634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2177.407481][ T2634] RIP: 0033:0x457c97 [ 2177.407496][ T2634] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:05:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x2}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2177.407511][ T2634] RSP: 002b:00007fd54e20d098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2177.423063][ T2634] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000457c97 [ 2177.423073][ T2634] RDX: 00007fd54e20d510 RSI: 000000004020ae46 RDI: 000000000000000e [ 2177.423083][ T2634] RBP: 0000000020ffd000 R08: 00007fd54e20d0a0 R09: 000000000073bf00 [ 2177.423092][ T2634] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 2177.423100][ T2634] R13: 000000000000000e R14: 00000000004dbbe8 R15: 00000000ffffffff [ 2177.487259][ T2662] overlayfs: filesystem on './file0' not supported as upperdir [ 2177.511635][ T2634] memory: usage 307200kB, limit 307200kB, failcnt 2182 [ 2177.541077][ T2634] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2177.550082][ T2634] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 05:05:26 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x101, 0x3}, 0x8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x4}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2177.563353][ T2634] Memory cgroup stats for /syz4: cache:32KB rss:161716KB rss_huge:151552KB shmem:132KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:12KB active_anon:161704KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2177.600386][ T2634] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2633,uid=0 [ 2177.636703][ T2634] Memory cgroup out of memory: Killed process 2633 (syz-executor.4) total-vm:72840kB, anon-rss:4268kB, file-rss:35652kB, shmem-rss:0kB [ 2177.663842][ T1044] oom_reaper: reaped process 2633 (syz-executor.4), now anon-rss:0kB, file-rss:34704kB, shmem-rss:0kB [ 2177.746258][ T2683] overlayfs: filesystem on './file0' not supported as upperdir 05:05:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x1) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x154, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:26 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAMEAT(r0, &(0x7f0000000380)={0x7, 0x4b, 0x2}, 0x7) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d002f62696c65302c6c6f7762726469723d2e2f66696c65302c776f728e6069723d2e2f66696e65315c007dd1110e90cb260e13f4f2d9e8a91462a1471c24456bd500a111e12516bab1a2cf82252d5b4b6ee2f295d787beb749f545e9045d1c83456a0fa9117046bfed9b8b2635e1"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') accept4(r2, &(0x7f0000000100)=@xdp, &(0x7f0000000240)=0x80, 0x80800) write$P9_RRENAMEAT(r1, &(0x7f00000002c0)={0x7, 0x4b, 0x1}, 0x7) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) unlink(&(0x7f0000000000)='./file0\x00') [ 2177.861543][ T2688] overlayfs: unrecognized mount option "upperdir=" or missing value [ 2177.883122][ T2700] overlayfs: unrecognized mount option "upperdir=" or missing value [ 2178.201116][ T2703] syz-executor.4 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 2178.224101][ T2703] CPU: 0 PID: 2703 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2178.233046][ T2703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2178.243091][ T2703] Call Trace: [ 2178.246371][ T2703] dump_stack+0x172/0x1f0 [ 2178.250688][ T2703] dump_header+0x10f/0xb6c [ 2178.255187][ T2703] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2178.261002][ T2703] ? ___ratelimit+0x60/0x595 [ 2178.265582][ T2703] ? do_raw_spin_unlock+0x57/0x270 [ 2178.270835][ T2703] oom_kill_process.cold+0x10/0x15 [ 2178.275937][ T2703] out_of_memory+0x79a/0x1280 [ 2178.280601][ T2703] ? lock_downgrade+0x880/0x880 [ 2178.285440][ T2703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2178.291668][ T2703] ? oom_killer_disable+0x280/0x280 [ 2178.296855][ T2703] ? find_held_lock+0x35/0x130 [ 2178.301613][ T2703] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2178.307148][ T2703] ? memcg_event_wake+0x230/0x230 [ 2178.312164][ T2703] ? do_raw_spin_unlock+0x57/0x270 [ 2178.317267][ T2703] ? _raw_spin_unlock+0x2d/0x50 [ 2178.322107][ T2703] try_charge+0x118d/0x1790 [ 2178.326602][ T2703] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2178.332436][ T2703] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2178.337971][ T2703] ? find_held_lock+0x35/0x130 [ 2178.342789][ T2703] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2178.348329][ T2703] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2178.353909][ T2703] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2178.359138][ T2703] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2178.364674][ T2703] __memcg_kmem_charge+0x136/0x300 [ 2178.369778][ T2703] __alloc_pages_nodemask+0x437/0x7e0 [ 2178.375146][ T2703] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2178.380856][ T2703] ? mmu_topup_memory_caches+0x97/0x490 [ 2178.386389][ T2703] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2178.392618][ T2703] alloc_pages_current+0x107/0x210 [ 2178.397715][ T2703] ? find_held_lock+0x35/0x130 [ 2178.402468][ T2703] __get_free_pages+0xc/0x40 [ 2178.407048][ T2703] mmu_topup_memory_caches+0x1e1/0x490 [ 2178.412550][ T2703] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2178.418781][ T2703] kvm_mmu_load+0x21/0x1300 [ 2178.423282][ T2703] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 2178.428944][ T2703] ? vcpu_enter_guest+0x2a33/0x60b0 [ 2178.434172][ T2703] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2178.439549][ T2703] vcpu_enter_guest+0x3c8d/0x60b0 [ 2178.444566][ T2703] ? emulator_read_emulated+0x50/0x50 [ 2178.449930][ T2703] ? lock_acquire+0x16f/0x3f0 [ 2178.454597][ T2703] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 2178.460306][ T2703] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 2178.465839][ T2703] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 2178.471594][ T2703] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2178.476266][ T2703] ? kvm_vcpu_block+0xce0/0xce0 [ 2178.481106][ T2703] ? tomoyo_path_number_perm+0x263/0x520 [ 2178.486727][ T2703] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2178.492570][ T2703] ? __fget+0x35a/0x550 [ 2178.496719][ T2703] ? kvm_vcpu_block+0xce0/0xce0 [ 2178.501558][ T2703] do_vfs_ioctl+0xd6e/0x1390 [ 2178.506139][ T2703] ? ioctl_preallocate+0x210/0x210 [ 2178.511237][ T2703] ? __fget+0x381/0x550 [ 2178.515384][ T2703] ? ksys_dup3+0x3e0/0x3e0 [ 2178.519788][ T2703] ? nsecs_to_jiffies+0x30/0x30 [ 2178.524626][ T2703] ? tomoyo_file_ioctl+0x23/0x30 [ 2178.529553][ T2703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2178.535908][ T2703] ? security_file_ioctl+0x93/0xc0 [ 2178.541029][ T2703] ksys_ioctl+0xab/0xd0 [ 2178.545223][ T2703] __x64_sys_ioctl+0x73/0xb0 [ 2178.549812][ T2703] do_syscall_64+0x103/0x610 [ 2178.554397][ T2703] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2178.560325][ T2703] RIP: 0033:0x457e29 [ 2178.564222][ T2703] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2178.583873][ T2703] RSP: 002b:00007fd54e1edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2178.592270][ T2703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 05:05:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f7, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xa}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:27 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:27 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir\b\x00\x00\x00\x00\x00\x00\x00\\\x00']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000000040000001, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x7) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2178.600228][ T2703] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 2178.608335][ T2703] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.616293][ T2703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e1ee6d4 [ 2178.624265][ T2703] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 00000000ffffffff 05:05:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x155, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x11}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:27 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2178.674886][ T2703] memory: usage 307200kB, limit 307200kB, failcnt 2302 [ 2178.686669][ T2717] overlayfs: unrecognized mount option "workdir" or missing value [ 2178.699118][ T2703] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2178.744375][ T2703] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2178.748155][ T2723] overlayfs: unrecognized mount option "workdir" or missing value 05:05:27 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469010400000000e1ff2f2c7264697e4d4534a684e68a302c776f726b60dd1769723d2e51e6696c6531"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2178.776889][ T2703] Memory cgroup stats for /syz4: cache:32KB rss:161704KB rss_huge:151552KB shmem:132KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:12KB active_anon:161700KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2178.800088][ T2703] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2698,uid=0 [ 2178.815666][ T2703] Memory cgroup out of memory: Killed process 2698 (syz-executor.4) total-vm:72708kB, anon-rss:4208kB, file-rss:34816kB, shmem-rss:0kB [ 2178.864854][ T2736] overlayfs: unrecognized mount option "upperdi" or missing value [ 2178.895380][ T1044] oom_reaper: reaped process 2698 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 2178.913389][ T2737] overlayfs: unrecognized mount option "upperdi" or missing value 05:05:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) geteuid() getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000340)={@local, 0x0}, &(0x7f0000000380)=0x14) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@empty, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0x1d, r7, r8}, {0x0, 0xffffffff80000001, 0x0, 0x6, 0x7, 0x6, 0x0, 0x7ff}, {0x0, 0x9, 0x9, 0xac}, 0xa50, 0x6e6bb5, 0x0, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d3, 0x33}, 0xa, @in6=@mcast2, 0x3500, 0x0, 0x0, 0x200, 0x6, 0x6, 0x7f}}, 0xe8) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000580)=0x24, 0x4) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000000200)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) ioctl$sock_x25_SIOCDELRT(r10, 0x890c, &(0x7f0000000240)={@remote={[], 0x1}, 0xb, 'ip6tnl0\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x801, 0x0) open$dir(0x0, 0x402080, 0x41) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:27 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xc0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x156, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2179.333903][ T2749] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 2179.346474][ T2749] CPU: 1 PID: 2749 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2179.355420][ T2749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.365480][ T2749] Call Trace: [ 2179.368788][ T2749] dump_stack+0x172/0x1f0 [ 2179.373131][ T2749] dump_header+0x10f/0xb6c [ 2179.377565][ T2749] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2179.383387][ T2749] ? ___ratelimit+0x60/0x595 [ 2179.388014][ T2749] ? do_raw_spin_unlock+0x57/0x270 [ 2179.393141][ T2749] oom_kill_process.cold+0x10/0x15 [ 2179.398267][ T2749] out_of_memory+0x79a/0x1280 [ 2179.402958][ T2749] ? lock_downgrade+0x880/0x880 [ 2179.407846][ T2749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.414109][ T2749] ? oom_killer_disable+0x280/0x280 [ 2179.419316][ T2749] ? find_held_lock+0x35/0x130 [ 2179.424094][ T2749] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2179.429646][ T2749] ? memcg_event_wake+0x230/0x230 [ 2179.434675][ T2749] ? do_raw_spin_unlock+0x57/0x270 [ 2179.439781][ T2749] ? _raw_spin_unlock+0x2d/0x50 [ 2179.444635][ T2749] try_charge+0x118d/0x1790 [ 2179.449328][ T2749] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2179.454880][ T2749] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2179.460425][ T2749] ? find_held_lock+0x35/0x130 [ 2179.465193][ T2749] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2179.470767][ T2749] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2179.476314][ T2749] ? memcg_kmem_put_cache+0xb0/0xb0 05:05:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f8, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:28 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000180)='./bus\x00', 0x9, 0x4, &(0x7f0000000340)=[{&(0x7f00000001c0)="f0a7b1f78e9cb9c2d6d9e0284d76a2d4d065860288f2e47d4ad0d78330b8cb726196ddc598e27b698d839c4b535ee18176fec9e99799196e6b8be4d0", 0x3c, 0xfff}, {&(0x7f00000002c0)="a5fb494adf92e3f3e6d2a8d4ca40302362ad8a31aa74486db1cb1b971050319abcb9e08ecf675b07bfa408038fbe201a5f67785a17a75dde9a0c8f320ba589d6d64a8007df43", 0x46, 0x1ff}, {&(0x7f0000000240)="205713e078d4c5232e89ba5a50b9358b3dbd80f117e5ad0e30622edf16d52a8858819390260dfb", 0x27, 0x3}, {&(0x7f0000000400)="ecf95c62c19eeb0a1cda97e030c962594018c07886774b087b4bebf7c6104b2cecfcdcdbe936b5d3fd44fcf051d92e86640857078d8c119a0e75b595d4c36c065e06067ec08cc4951b56e5b76897a7ff50c267d55ba72762ff160a9ed1d1fa6131ad119be7d7563279ebe5d200e7964d6f3bfaab50ea9adb8844e26e17ee55f6fff8b00b785e69ae7bbb22b6cf8f1438b199654bb5f355eeaf94cc3f9a298ac649e1569b5ba9c795111022c61c27de6a02a65dbfc9b938a8db5e0261bb82", 0xbe, 0x6}], 0x888010, &(0x7f00000004c0)={[{@adaptive_mode='mode=adaptive'}, {@grpjquota={'grpjquota', 0x3d, '^'}}, {@data_flush='data_flush'}], [{@hash='hash'}, {@smackfsroot={'smackfsroot', 0x3d, ')em1)'}}, {@permit_directio='permit_directio'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'security:user'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x77, 0x38, 0x31, 0x77, 0x7f, 0x31, 0x77], 0x2d, [0x77, 0x37, 0x66, 0x34], 0x2d, [0x3d, 0x7f, 0x79, 0x39], 0x2d, [0x0, 0x37, 0x30, 0x73], 0x2d, [0x7b, 0x33, 0x75, 0x35, 0x65, 0x37, 0x76]}}}]}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757070657264697a3d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66edabe6032de4"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2179.481505][ T2749] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2179.487059][ T2749] __memcg_kmem_charge+0x136/0x300 [ 2179.492187][ T2749] __alloc_pages_nodemask+0x437/0x7e0 [ 2179.497569][ T2749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.503827][ T2749] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2179.509564][ T2749] ? copy_process.part.0+0x1d35/0x79d0 [ 2179.515138][ T2749] copy_process.part.0+0x3e0/0x79d0 [ 2179.520348][ T2749] ? psi_memstall_leave+0x11c/0x180 [ 2179.525568][ T2749] ? kvm_sched_clock_read+0x9/0x20 [ 2179.525587][ T2749] ? psi_memstall_leave+0x12e/0x180 [ 2179.525602][ T2749] ? find_held_lock+0x35/0x130 [ 2179.525618][ T2749] ? psi_memstall_leave+0x12e/0x180 [ 2179.525647][ T2749] ? __cleanup_sighand+0x60/0x60 [ 2179.525661][ T2749] ? __lock_acquire+0x548/0x3fb0 [ 2179.525693][ T2749] _do_fork+0x257/0xfd0 [ 2179.525713][ T2749] ? fork_idle+0x1d0/0x1d0 [ 2179.536043][ T2749] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 2179.536057][ T2749] ? lock_downgrade+0x880/0x880 [ 2179.536077][ T2749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.582145][ T2749] ? blkcg_exit_queue+0x30/0x30 [ 2179.587034][ T2749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2179.592597][ T2749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2179.598072][ T2749] ? do_syscall_64+0x26/0x610 [ 2179.602766][ T2749] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2179.608841][ T2749] ? do_syscall_64+0x26/0x610 [ 2179.608863][ T2749] __x64_sys_clone+0xbf/0x150 [ 2179.608881][ T2749] do_syscall_64+0x103/0x610 [ 2179.608900][ T2749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2179.608911][ T2749] RIP: 0033:0x45a7f9 [ 2179.608926][ T2749] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2179.608934][ T2749] RSP: 002b:00007fffc51663a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2179.608947][ T2749] RAX: ffffffffffffffda RBX: 00007fd54e1ac700 RCX: 000000000045a7f9 [ 2179.608956][ T2749] RDX: 00007fd54e1ac9d0 RSI: 00007fd54e1abdb0 RDI: 00000000003d0f00 [ 2179.608965][ T2749] RBP: 00007fffc51665b0 R08: 00007fd54e1ac700 R09: 00007fd54e1ac700 [ 2179.608974][ T2749] R10: 00007fd54e1ac9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2179.609008][ T2749] R13: 00007fffc516645f R14: 00007fd54e1ac9c0 R15: 000000000073c0ec [ 2179.638111][ T2749] memory: usage 307200kB, limit 307200kB, failcnt 2358 [ 2179.664858][ T2767] overlayfs: unrecognized mount option "upperdiz=./file0" or missing value [ 2179.674960][ T2749] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2179.701825][ C1] net_ratelimit: 20 callbacks suppressed 05:05:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x34a}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2179.701833][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.713655][ T2760] overlayfs: unrecognized mount option "upperdiz=./file0" or missing value [ 2179.717364][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.717455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.756629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.762452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.768272][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2179.774137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2179.780012][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:28 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d2ec52f40351f0d8ccd3516fd0b6f136b8f2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x8) unlink(&(0x7f0000000000)='./file0\x00') [ 2179.814292][ T2749] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2179.836469][ T2749] Memory cgroup stats for /syz4: cache:32KB rss:161636KB rss_huge:151552KB shmem:132KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:12KB active_anon:161720KB inactive_file:0KB active_file:0KB unevictable:0KB 05:05:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2179.933623][ T2784] overlayfs: failed to resolve '.Å/@5 ŒÍ5ý ok/file0': -2 [ 2179.963473][ T2789] overlayfs: failed to resolve '.Å/@5 ŒÍ5ý ok/file0': -2 [ 2179.975407][ T2749] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2749,uid=0 [ 2179.992089][ T2749] Memory cgroup out of memory: Killed process 2749 (syz-executor.4) total-vm:72840kB, anon-rss:4260kB, file-rss:35720kB, shmem-rss:0kB [ 2180.013246][ T1044] oom_reaper: reaped process 2749 (syz-executor.4), now anon-rss:0kB, file-rss:34892kB, shmem-rss:0kB 05:05:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x157, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xa00}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:29 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000140)) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2180.171848][ T2804] overlayfs: filesystem on './file0' not supported as upperdir [ 2180.254314][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2180.260118][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1f9, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0xffffff33) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000300)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x4, 0x48000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x80, 0x3, 0x0, 0xffffffffffff8000, 0x7, 0x3, 0x6}, 0x1c) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000000240)=r6) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x1100}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:29 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f776572646972302aedc7477c0de35e33ff0b41f8392c776f72"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$P9_RREADDIR(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000290200000100000004000000000000000000000007000000000000000405002e2f6275730003000000080000000000000001000000000000000507002e2f66696c653114020000004b219bdc410eccc0beda6cbb116fd8040000000000000001000000000000000407002e2f66696c6530240200000007000000000000000c090000000002000107002e2f66696c6531cad5cfca2df72a45d9c3c233c519d59dd4d13728800e5d91292676e396efa7c5ed5590bb9a6a927e9444ce3e76f53a51ac5951dd7188343c4025"], 0x85) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x4, 0x3f, 0xab8, 0x7, 0x7ff}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r2, 0x8ce7}, 0x8) unlink(&(0x7f0000000040)='./file0\x00') 05:05:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2180.442508][ T2816] overlayfs: unrecognized mount option "lowerdir0*íÇG| ã^3ÿ Aø9" or missing value 05:05:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x26e8}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2180.480333][ T2812] syz-executor.4 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2180.506468][ T2816] overlayfs: unrecognized mount option "lowerdir0*íÇG| ã^3ÿ Aø9" or missing value [ 2180.516225][ T2812] CPU: 1 PID: 2812 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2180.525186][ T2812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2180.535256][ T2812] Call Trace: [ 2180.538564][ T2812] dump_stack+0x172/0x1f0 05:05:29 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)=0x1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2180.542917][ T2812] dump_header+0x10f/0xb6c [ 2180.547555][ T2812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2180.553377][ T2812] ? ___ratelimit+0x60/0x595 [ 2180.558007][ T2812] ? do_raw_spin_unlock+0x57/0x270 [ 2180.563139][ T2812] oom_kill_process.cold+0x10/0x15 [ 2180.568272][ T2812] out_of_memory+0x79a/0x1280 [ 2180.572969][ T2812] ? lock_downgrade+0x880/0x880 [ 2180.577859][ T2812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.584114][ T2812] ? oom_killer_disable+0x280/0x280 [ 2180.584130][ T2812] ? find_held_lock+0x35/0x130 [ 2180.584155][ T2812] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2180.584174][ T2812] ? memcg_event_wake+0x230/0x230 [ 2180.599689][ T2812] ? do_raw_spin_unlock+0x57/0x270 [ 2180.599707][ T2812] ? _raw_spin_unlock+0x2d/0x50 [ 2180.599727][ T2812] try_charge+0x118d/0x1790 [ 2180.599759][ T2812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2180.624794][ T2812] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2180.630360][ T2812] ? find_held_lock+0x35/0x130 [ 2180.635142][ T2812] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2180.636313][ T2832] overlayfs: filesystem on './file0' not supported as upperdir [ 2180.640713][ T2812] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2180.640731][ T2812] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2180.640757][ T2812] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2180.640779][ T2812] __memcg_kmem_charge+0x136/0x300 [ 2180.669686][ T2812] __alloc_pages_nodemask+0x437/0x7e0 [ 2180.675073][ T2812] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2180.680808][ T2812] ? __kmalloc_node+0x3d/0x70 [ 2180.685512][ T2812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2180.691780][ T2812] alloc_pages_current+0x107/0x210 [ 2180.696898][ T2812] ? ___might_sleep+0x163/0x280 [ 2180.701740][ T2812] __vmalloc_node_range+0x4b0/0x790 [ 2180.706957][ T2812] ? __kvm_set_memory_region+0xb6b/0x20f0 [ 2180.712716][ T2812] __vmalloc_node_flags_caller+0x71/0x90 [ 2180.718373][ T2812] ? __kvm_set_memory_region+0xb6b/0x20f0 [ 2180.724108][ T2812] kvmalloc_node+0xdc/0x100 [ 2180.728618][ T2812] __kvm_set_memory_region+0xb6b/0x20f0 [ 2180.734172][ T2812] ? kvm_clear_dirty_log_protect+0x840/0x840 [ 2180.740194][ T2812] kvm_set_memory_region+0x2f/0x50 [ 2180.745310][ T2812] kvm_vm_ioctl+0x75e/0x1900 [ 2180.749891][ T2812] ? __lock_acquire+0x548/0x3fb0 [ 2180.754866][ T2812] ? kvm_unregister_device_ops+0x70/0x70 [ 2180.760495][ T2812] ? delayacct_end+0xc9/0x100 [ 2180.765167][ T2812] ? __lock_acquire+0x548/0x3fb0 [ 2180.770104][ T2812] ? psi_memstall_leave+0x11c/0x180 [ 2180.775295][ T2812] ? tomoyo_domain+0xc5/0x160 [ 2180.779964][ T2812] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2180.786217][ T2812] ? tomoyo_init_request_info+0x105/0x1d0 [ 2180.791926][ T2812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.798160][ T2812] ? tomoyo_path_number_perm+0x263/0x520 [ 2180.803786][ T2812] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2180.809587][ T2812] ? __fget+0x35a/0x550 [ 2180.813747][ T2812] ? kvm_unregister_device_ops+0x70/0x70 [ 2180.819403][ T2812] do_vfs_ioctl+0xd6e/0x1390 [ 2180.824037][ T2812] ? ioctl_preallocate+0x210/0x210 [ 2180.829156][ T2812] ? __fget+0x381/0x550 [ 2180.833320][ T2812] ? ksys_dup3+0x3e0/0x3e0 [ 2180.837757][ T2812] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 2180.843891][ T2812] ? tomoyo_file_ioctl+0x23/0x30 [ 2180.848822][ T2812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.855056][ T2812] ? security_file_ioctl+0x93/0xc0 [ 2180.860173][ T2812] ksys_ioctl+0xab/0xd0 [ 2180.864335][ T2812] __x64_sys_ioctl+0x73/0xb0 [ 2180.868944][ T2812] do_syscall_64+0x103/0x610 [ 2180.873581][ T2812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2180.879478][ T2812] RIP: 0033:0x457c97 [ 2180.883364][ T2812] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2180.902962][ T2812] RSP: 002b:00007fd54e20d098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2180.911412][ T2812] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000000457c97 [ 2180.919391][ T2812] RDX: 00007fd54e20d510 RSI: 000000004020ae46 RDI: 0000000000000006 [ 2180.927372][ T2812] RBP: 0000000020fff000 R08: 00007fd54e20d0a0 R09: 000000000073bf00 [ 2180.935349][ T2812] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 05:05:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x158, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:29 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) mq_timedsend(r0, &(0x7f00000002c0)="ccbd01fcce775b45b36d4e3b1e582217f15655499c7e8850f4b4d87d5a796bc7c554014d89", 0x25, 0xa3e1, &(0x7f0000000300)={0x0, 0x989680}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) pipe(0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000001c0)=0x9400000000, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x3e80}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2180.943308][ T2812] R13: 0000000000000006 R14: 00000000004dbbe8 R15: 00000000ffffffff [ 2180.973582][ T2812] memory: usage 307168kB, limit 307200kB, failcnt 2496 [ 2180.992383][ T2812] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:05:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) [ 2181.031168][ T2812] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2181.047581][ T2812] Memory cgroup stats for /syz4: cache:32KB rss:161624KB rss_huge:151552KB shmem:132KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:12KB active_anon:161680KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2181.082289][ T2812] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2811,uid=0 [ 2181.104111][ T2812] Memory cgroup out of memory: Killed process 2811 (syz-executor.4) total-vm:72576kB, anon-rss:4208kB, file-rss:34816kB, shmem-rss:0kB [ 2181.129032][ T1044] oom_reaper: reaped process 2811 (syz-executor.4), now anon-rss:0kB, file-rss:34716kB, shmem-rss:0kB [ 2181.168974][ T2849] overlayfs: filesystem on './file0' not supported as upperdir 05:05:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1fa, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x3ec0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 05:05:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x7, &(0x7f00000014c0)=[{&(0x7f0000000280)="f619102dcdcde48a3fce781fa2f8ea0ec547ada09c2f3aa3dc93a3f917aa", 0x1e, 0x7f}, {&(0x7f00000002c0)="18", 0x1, 0x2}, {&(0x7f0000000300)="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", 0x1000, 0x7fffffff}, {&(0x7f0000001300)="73765fe454c924854a0b179484cfe0380626db4455c792f517d6ea0bd2e72fd535ad0313404c1b7463", 0x29, 0x8000}, {&(0x7f0000001340)="efd09e60236d05a28cf3464e64399ca1c8b0a87ce47abe3919855a502f8114b8632a99dc7b5a9aa8ae4722a3ccc4a7afa3206567da0c3415a597a3960d8e71cac9e2741559c64dec0f9ef2930e1ad90ee3e75bcda2d9a1fa046767a6fa9de2d2f729b48cb8f07d50c7e8ea970d692b3fe205e475c793714677844b5d31da500fe4e6edc5f369c43c4d1ccf80ea502a31842a92ade82dece8a1540a66c5701f6a03690d23d3522f85855901606e9c4ff4a4bf726ca9a2b0896195e21d0b14b74ed803e9e7ca02878cd4362a93d3d7", 0xce, 0x400}, {&(0x7f0000001440)="b7834a8566e363f99baa3fdbc26891164fd22d70da7aa15daebc41ef4f5ebe986f4d7bd0ec939e46bdf7a66803e576347e75", 0x32, 0x6}, {&(0x7f0000001480)="7542aa4d9d7b18ea8eca173d89b29c73522bec710442779ae930195d0f46a43914c8bb890e9e971f55d7bcb2e824b563c58824b83ae111", 0x37}], 0x800000, &(0x7f0000001580)={[{@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}], [{@obj_role={'obj_role'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:30 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e2f66696c65302c776f556b6469723d2e2f66696c65315c0000000000004a000900000000000000001ffd77238ea57e0ee5071708f7f90857102298f1a5260e0caf2dddd8efa85e890ef914f8f8185ce614fcb294ce8e04ff60f539ac9788e624960089bc9d3f10516b"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2181.323702][ T2861] overlayfs: unrecognized mount option "woUkdir=./file1\" or missing value 05:05:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 05:05:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x3f00}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2181.370244][ T2861] overlayfs: unrecognized mount option "woUkdir=./file1\" or missing value 05:05:30 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757070657264fe69723d2e2f66696c65302c6c6f7765726469723d2e2fff6be0b409cff96469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2181.508292][ T2880] overlayfs: unrecognized mount option "upperdþir=./file0" or missing value [ 2181.539698][ T2880] overlayfs: unrecognized mount option "upperdþir=./file0" or missing value 05:05:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x159, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x4a03}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) 05:05:30 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2181.885149][ T2898] overlayfs: filesystem on './file0' not supported as upperdir 05:05:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1fb, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:31 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) 05:05:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x803e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:31 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, 0x6, {0x7ff, 0x4, 0xffffffff, 0x7}}, 0x20) 05:05:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() bind$bt_sco(r1, &(0x7f0000000200)={0x1f, {0x2, 0x1f, 0x100000001, 0x60000000, 0x5, 0x1}}, 0x8) r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x15a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xc000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:31 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) [ 2182.299194][ T2926] overlayfs: filesystem on './file0' not supported as upperdir 05:05:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x15b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:31 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = geteuid() syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./bus\x00', 0x101, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="26618ffd2f99400ccb4fa0c957205dd5d9d2b6b0590a9aac9b47d57212fddeeddfe498e80daf3750c00dcb9956973c4540f064bfd9024dff6b7f53070d17fe60853c0304f31eabb8c8f7cd6c86fbae1d5c969cd0492ddd09c141609f3e5a640ee6da005411b2b5055e83be0bc84cd351800ac11195beb6aa9e7ae3a442fe71c61ca0a49eff4bb20c", 0x88, 0x9}, {&(0x7f0000000180)="c8eea993a39d0bdd4d5715545e5858df2a2f9c2b5befc8f093b685c9e2b375d44efd63ac095a3446359457871a0686868e85e90bcecdb4e79dece144374ebba0664c4a44c67a7b8b51b84074f0c61b4512f8a137cecf61ea4045b4eba415842de4a5933794ca95cad786d402cb367f5338bd91c198b4ba2c38d3", 0x7a, 0x2}], 0x2, &(0x7f0000000400)={[{@fat=@errors_continue='errors=continue'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@nodots='nodots'}, {@fat=@check_normal='check=normal'}, {@nodots='nodots'}, {@dots='dots'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'lowerdir'}}, {@subj_user={'subj_user'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@uid_lt={'uid<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}, {@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '\\selfnodevppp1proc*%'}}]}) fchdir(r0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000380)=0x2) 05:05:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 05:05:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xc03e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2182.618467][ T2952] overlayfs: filesystem on './file0' not supported as upperdir 05:05:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1fc, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xe826}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:32 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000140)={0x7, 0x92, 0x9, 0x79bd}) ioctl$BLKRRPART(r0, 0x125f, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 05:05:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0xffffffffffffff98) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) munlockall() connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x15c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f1802ad0003"], 0x6) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb}, 0xb) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) [ 2183.217767][ T2965] overlayfs: filesystem on './file0' not supported as upperdir 05:05:32 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) mount$overlay(0x400000, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c64656641756c745f7065726d697373696f6e735c6673757569643d3537397700617f712d00357f662d6338373d2d767766372d65306538776537392c66736e616d653d757070b9876469722c6653636f6e746578743d73797374656d5f752c61707072616973655f747907e08dfa4ba638c4064970653d696d617369672c6f626a5f726f6c653d6f7665726c6179002c66736d616769633d3078303030303030303030303030303038342c666f776e65723d", @ANYRESDEC=r1, @ANYBLOB="0e736d61636b6673726f6f743d2c666f776e65353cdbc20cff7629e392c4cad00b0f7a012f7b1c3c1bb5279f20d477e9609f3a899aae175fc327792f7f961655e62dcbf8b303bbc777ccb0f59b5ee7fe9a40de318da187a121a1cd296868999b41c964cec43fd8d4dd8e6fc35a83cd4c6ef23273a76a2285", @ANYRESDEC=r0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x101) prctl$PR_SET_FPEMU(0xa, 0x2) 05:05:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x33fe0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) 05:05:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x34000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2183.433360][ T2992] overlayfs: unrecognized mount option "defAult_permissions\fsuuid=579w" or missing value [ 2183.503298][ T2992] overlayfs: unrecognized mount option "defAult_permissions\fsuuid=579w" or missing value 05:05:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x40000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:32 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x2000000) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000180)='./bus\x00') 05:05:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1fd, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0xb, @sliced={0x4, [0x81, 0x673, 0x6, 0x100, 0x5, 0x4, 0xfffffffffffffffd, 0x8000, 0x8c92, 0x3, 0x72, 0x4, 0x80, 0x1, 0x5723c2b1, 0x8000, 0x1, 0x8, 0x9, 0x10001, 0x6, 0x94ae, 0x7, 0xfb85, 0x851d, 0x400, 0x3, 0xfa8, 0x3, 0x80000000, 0x7, 0x6, 0x2, 0x7fff, 0x4, 0x1000, 0x10000, 0x4, 0x8, 0x800, 0x100000000, 0x9, 0x5, 0xfffffffffffff800, 0x80000001, 0x7, 0x1, 0x8000], 0x8}}) r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x400300}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2184.053458][ T3014] overlayfs: './file0' not a directory [ 2184.077861][ T26] audit: type=1804 audit(1551589533.002:474): pid=3009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir291748992/syzkaller.Cqx5PT/3411/file0/file0" dev="overlay" ino=349158 res=1 05:05:33 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 05:05:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x15d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf0ff7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2184.236536][ T3027] overlayfs: './file0' not a directory [ 2184.243040][ T26] audit: type=1804 audit(1551589533.162:475): pid=3026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir291748992/syzkaller.Cqx5PT/3412/file0/file0" dev="overlay" ino=349177 res=1 05:05:33 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000d00)=0x400) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) fchdir(r1) syz_mount_image$iso9660(&(0x7f0000000300)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0xe2a7, 0xa, &(0x7f0000000a80)=[{&(0x7f0000000400)="da52db52da6635dc6ba6987a0494ed5eea8e1eea836e11a671c71e4b1d516e762d5668755c6b81d9ea4224b44b6f34770decbf4a45c177c8a9166d4dff4b7b52609dc04c20e7491cbe94ce777a3089d7e894d104265a39e2caf93ddcc12562bdacb88f0afc6c3869599a9560647d1ea73ea1158c8827e9d31d5cbff7252954a23da1d2e49ec6c23767f6afc5436b92cb3e9dfbb1c882610b97e4002fc8f4f082e2916d581cad06c46443e4d7", 0xac, 0xabd}, {&(0x7f0000000380)="f20d9c32c0ab347272b095993405248b31017e5c8f48a62497c05ff4e5c10c37bac66c015e1eee", 0x27, 0x3}, {&(0x7f00000004c0)="85fa05ab31e5084cadc81479bbc9e29e1784ecb938ac9010bdc012663c04513c948626405a0e836aa6a24e0a561b02b0bb7a83a5eaff5419c680f33e7caa6bafb3bbfaef1d771066b8279bfe589249dca1108daa2d14aacfa4969b5aa64aaa1422138239bcfa0be36d5a077b2d22a9c0c349cadce18865d986ce591951e9c44c216376ef0a69191253ab8602f7", 0x8d, 0x3f}, {&(0x7f0000000580)="192c76ba644c7236551948509fb58413f81ddf24c395806e2f736c3fe86304905e175fdead5b300d623b8a945fef7a5b3e83fd1463e3b55538d87aa195d96d4dcd5e6c7a9b69e4196f5ed0bc9b657ab97719ea3b5300aae13f6cc92ad49c95001a0d7066ec50a6678cb6ef98d334d68503aefff1582091a08712cbfbab054b087aa110e78c47bb9c28", 0x89}, {&(0x7f0000000640)="2dc2c7a6c7c96dd6c77bfd50a43336543b4615ef31e13dd5bf41306df56c9ed060cb3eb352714eec4989aa15352ac018132682585a66ce5c8b0aa8579df63307acacf7674a17a01c0aaf101e3b660f2ff51d07e2cd09748326f82636837a03696e742d44a76fd4", 0x67, 0x1}, {&(0x7f00000006c0)="b53663c121b35860abafa9a3351aa1073d659bab31713932809adbc01948ccf260f8695a77243241bb", 0x29, 0x7fff}, {&(0x7f0000000700)="48e9b595f001128896c47629e9b83700a860d20f9c455f3444b20bee7402ad32dc8b21d90bf9a5f886b990b8c23ab19d423fdd91a17dc5dd338b613b9245c65d7903312beea219543850a46b18d6b4cba3f0733ab2fef8a3bfd2bf104930e0d6f81af2b755c4b2c1c8de9154f47e3deeda9f725c40fccf9161f87d7bad347cdc78d30775e317a34a0d79079d6f538a8c44c20bab40f3fed3e74e35dbfa3d766de128a03e213c04e6e077c3e0032e06f0c8bf12336c9b5434a231ef6a2cbed1b6d144285dfdd0b930feaa9d1035d793caea62b2a9ef131f8704", 0xd9, 0x79}, {&(0x7f0000000800)="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", 0xfe, 0x6d3}, {&(0x7f0000000900)="ca585120dfa395e1571ae015fec856688eec586154828ef39e4ff05cff5152be7c343c5206cbec5a53a3aebb5f2876c05b16b832c71c02d4e7aa7753fe0a66f5f56aaa49392e4bcce3bb2af09e2c25c58fb3f4b5f3cbcf1eb310c590fbeeae626e3b062cb3c1eb392a079fbb214ce879c2e739d3caa50ef2bc50644bd9746860c229d7fd570212b216706eef201b25514320300b496bd8716c8fd076bda93b0d1c0646c00ada6808bf429a035c9c24", 0xaf, 0x8}, {&(0x7f00000009c0)="f07490114ff7c507e3864cc6b4d83da57af1d7969b446cc59d8ea49cb1c54bd7a24724c6208c0aa6cffced2e00b0ac70d325eca6d5cd6bd3152d1b2fc71a3f8bdf035d1871e285b2f279cd87e60860ecb6a1d457f81911e8b7478bc596c88ec0cc351f7856e5fbde401a48921a5f521c41a0270bea4491a2824228a9f20d08d81014b7507367eb5dd214d191ed4bfcb17eb57ed6be96db02bf891c55313ab7982d0b46295d673d5e627328be00cb97ef02d4f66ff40c33a94ca738", 0xbb, 0x6}], 0x20, &(0x7f0000000b80)={[{@cruft='cruft'}, {@map_normal='map=normal'}, {@map_normal='map=normal'}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'upperdir'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@smackfshat={'smackfshat', 0x3d, 'nodev@'}}, {@obj_type={'obj_type', 0x3d, '-,^trustedsecurity'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'workdir'}}]}) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') r3 = msgget$private(0x0, 0x8) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000c80)=0xb4) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/163) unlink(&(0x7f0000000000)='./file0\x00') 05:05:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf0ffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:33 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 2184.325016][ T26] audit: type=1804 audit(1551589533.202:476): pid=3026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir291748992/syzkaller.Cqx5PT/3412/file0/bus" dev="overlay" ino=349177 res=1 05:05:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x15e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x1000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:33 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffff4c, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200085}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 2184.525256][ T3049] overlayfs: filesystem on './file0' not supported as upperdir 05:05:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1fe, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x15f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:33 executing program 3: creat(&(0x7f0000000000)='./file1\x00', 0x0) mincore(&(0x7f00000d8000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f00005d3000/0x2000)=nil, 0x2000, 0x0) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 05:05:33 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75696400000000000000000000000000008b18e05d8deaa74f64954092da94ba9914beffecb289e16e7511de4c798426273e5b3094c6f15f8120544d25e2a1", @ANYRESDEC=r0, @ANYBLOB=',rootcontext=root,fscontext=root,smackfsroot=,hash,context=staff_u,func=MODULE_C@ECK,dont_hash,\x00']) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x52a, 0x1, 0x8201, 0xffffffff, 0x1, 0x0, 0x4, 0x0, r3}, &(0x7f00000002c0)=0x20) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = getpid() r7 = fcntl$getown(r0, 0x9) setpgid(r6, r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000440)=0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@remote, @broadcast}, &(0x7f0000000340)=0xc) open$dir(0x0, 0x402080, 0x41) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x4, 0x3, 0xffffffffffffffd4, 0x1, 0x0, 0x2000000000000000, 0x1000, 0x4, 0x7ea163ea, 0x20000000000000, 0x4, 0x5, 0x1, 0x3, 0x401, 0x3, 0x28f, 0x71, 0x3, 0x5, 0x5, 0x45, 0x5, 0x7fffffff, 0x80000001, 0x5, 0x401, 0x100, 0x68, 0x1ff, 0xfce, 0x8000000000000000, 0x1, 0x4, 0x8, 0x5422, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000380), 0x2}, 0x10000, 0x541, 0x1, 0x9, 0xfffffffffffff001, 0x59}, r6, 0x7, r1, 0xa) 05:05:33 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(0xffffffffffffffff, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000003c0)={0x19980330, r4}, &(0x7f0000000400)={0xf990, 0x3f, 0x4, 0x0, 0x7, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/229, 0x2}) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xa000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2184.942870][ T3085] overlayfs: unrecognized mount option "uid" or missing value 05:05:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x160, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2185.002405][ T3085] overlayfs: unrecognized mount option "uid" or missing value 05:05:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x11000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000200)={0x1, 0x9}, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:34 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x400b01, 0x0) recvmsg$kcm(r0, &(0x7f0000001c00)={&(0x7f0000000600)=@tipc=@id, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000680)=""/254, 0xfe}, {&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/104, 0x68}, {&(0x7f00000018c0)=""/41, 0x29}, {&(0x7f0000001900)=""/96, 0x60}, {&(0x7f0000001980)=""/12, 0xc}, {&(0x7f00000019c0)=""/122, 0x7a}, {&(0x7f0000001a40)=""/30, 0x1e}], 0x9, &(0x7f0000001b40)=""/190, 0xbe}, 0x1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) unlink(&(0x7f0000000000)='./file0\x00') [ 2185.254124][ T3121] overlayfs: filesystem on './file0' not supported as upperdir 05:05:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x201, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x3f000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x80000001, 0x6, 0xd037, 0x7f]}) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x4, 0xffffffff, 0xad1, 0x1000, 0x0, 0x400, 0x5000, 0x4, 0x20, 0x1, 0x7, 0xfffffffffffffff7, 0x81, 0xffffffff80000001, 0x1, 0x10001, 0x3000000000000000, 0x1, 0x3000000, 0x40, 0x10000, 0x196, 0x5, 0x0, 0x2, 0x4, 0x75, 0x7, 0x400, 0x1, 0x0, 0x7, 0x8, 0xe5, 0x400, 0x8, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x8000, 0x0, 0x100000000, 0x5, 0x5, 0x7ff, 0x6}, r6, 0x9, r2, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:34 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c6530da2c6c6f7765726429723d2e2f7a00000000000000726b6469723d2e2f66696c65315c0035864df22a5303b287cddaa56365a99b6bfd21672a984d50f1503075705d339ee14b91f9091c5de0d911cbd3d75a728e57c481f634aeecb3b325a7b7343d4f783603d1ab8298fd7c0c3a3a71ae0f837ae072708fc509ac0f2b5e96e0c98f72ce830bf2b8fb18d6d7f418a09bc54d5e7fbb21be811ac50679076a077d6ed7cbb8c657"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x3, @empty, 0xffffffffffffff62}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x100000001}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r2, 0x7fff, 0x3, [0x3, 0x6, 0xc35a]}, 0xe) unlink(&(0x7f0000000000)='./file0\x00') 05:05:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x161, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3484, 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000200)=""/241) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x11f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) [ 2185.818654][ T3145] overlayfs: unrecognized mount option "lowerd)r=./z" or missing value 05:05:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x4a030000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x162, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2185.875279][ T3156] overlayfs: unrecognized mount option "lowerd)r=./z" or missing value 05:05:34 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065722a225cbb4822b71948488ff69656e5b96469723d2e2ffc3f0000000000007765726469723d2e2f66696c65302c771cc9696408000000baeb4d417ea642"]) r0 = open(&(0x7f0000000040)='./file2\x00', 0x10200, 0xffffffffffffffff) fchdir(r0) mknodat(r0, &(0x7f0000000100)='./bus\x00', 0x8100, 0xb941) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2185.934360][ C1] net_ratelimit: 20 callbacks suppressed [ 2185.934368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2185.945892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2185.951700][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2185.957515][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2185.963310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2185.969114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2186.015688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2186.021552][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x7ffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2186.082337][ T3173] overlayfs: unrecognized mount option "upper*"\»H"·HHö–Vå¹dir=./ü?" or missing value 05:05:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x163, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2186.136858][ T3180] overlayfs: unrecognized mount option "upper*"\»H"·HHö–Vå¹dir=./ü?" or missing value 05:05:35 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2186.379083][ T3195] overlayfs: filesystem on './file0' not supported as upperdir [ 2186.494336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2186.500174][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x202, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x803e0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x3486, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x361) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = getpid() r5 = fcntl$getown(r0, 0x9) setpgid(r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000240)) open$dir(0x0, 0x402080, 0x41) ptrace$peek(0x3, r5, &(0x7f00000002c0)) getsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000100), &(0x7f0000000280)=0x3ab) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:35 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) clone(0x8000, &(0x7f0000000140)="07504541c9a5a47781063d7de93e1d22716a1ffe404c2e74cff8329ba935c7fce99617f113aef7da186172ab6a70646b162c1b914ea9d89cd341bd69aaac78ba99a97c58e0ee6e465842f16a1c965fc83d01758bba773c88b85bde6093a7e3b8f9dce2254e4f4b7961c34b96fd4183ee0c9a88cccfa8b7d144e8095db1d1d30a49cb1105f82cf025fd1b721f54dafb413d351730596732308fd038b4d8e4e1ec0cd3bd1feba686b21c9149f0f469e2beb6f249cf476ce2c403", &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000002c0)) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:35 executing program 3 (fault-call:6 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xc0000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2186.801842][ T3220] overlayfs: filesystem on './file0' not supported as upperdir 05:05:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x2, &(0x7f00000006c0)=0x1) 05:05:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xc03e0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xe03f0300}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x164, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5421, &(0x7f00000006c0)=0x1) 05:05:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x203, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xe8260000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:36 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) lsetxattr$security_capability(&(0x7f0000001880)='./file1\x00', &(0x7f00000018c0)='security.capability\x00', &(0x7f0000001900)=@v3={0x3000000, [{0x9, 0x4}, {0x81, 0x40}], r1}, 0x18, 0x3) recvmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f0000000500)=""/242, 0xf2}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/139, 0x8b}, {&(0x7f00000016c0)=""/200, 0xc8}], 0x6, &(0x7f00000017c0)=""/80, 0x50}, 0x40000000) fchdir(r0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5450, &(0x7f00000006c0)=0x1) 05:05:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) ioctl$KDDELIO(r1, 0x4b35, 0xe6) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r0, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) open$dir(0x0, 0x402080, 0x41) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5451, &(0x7f00000006c0)=0x1) [ 2187.670108][ T3286] overlayfs: filesystem on './file0' not supported as upperdir 05:05:36 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='$\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=r1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xeffdffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf6ffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5452, &(0x7f00000006c0)=0x1) [ 2187.870569][ T3307] overlayfs: filesystem on './file0' not supported as upperdir 05:05:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x165, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:36 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x14) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x8, 0x9c, 0x80, 0x2e}) unlink(&(0x7f0000000000)='./file0\x00') [ 2188.077573][ T3336] overlayfs: filesystem on './file0' not supported as upperdir 05:05:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5460, &(0x7f00000006c0)=0x1) 05:05:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xfeffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:37 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0xa5) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400080040, 0x28) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x204, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x166, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3486, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x361) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getpid() r5 = fcntl$getown(r1, 0x9) setpgid(r5, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000200)={0x1, 0x0, 0x2080, {0xf000, 0x4002, 0x2}, [], "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", "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"}) open$dir(0x0, 0x402080, 0x41) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 05:05:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x40049409, &(0x7f00000006c0)=0x1) [ 2188.545678][ T3362] overlayfs: filesystem on './file0' not supported as upperdir 05:05:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xfffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x167, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:37 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xfffffdef}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af00, &(0x7f00000006c0)=0x1) 05:05:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xffffff7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xfffffff6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af60, &(0x7f00000006c0)=0x1) [ 2188.978610][ T3395] overlayfs: filesystem on './file0' not supported as upperdir 05:05:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x205, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:38 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0xdfffffffffbffffd) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75142c6572641c113eae3fc99757139baa38bc2c3a9869727d2e2f66696c67d3f8d13b59805fb86469723d2e2f66696c65315c00000000"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'caif0\x00', 0xffffffff}) fchdir(r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x7, 0x3, 0x7, 0x10001, 0x9, 0x3f, 0x20, 0x9, 0x5, 0x3}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0x0, 0x5}, 0x10) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') ioctl$void(r1, 0x5451) unlink(&(0x7f0000000000)='./file0\x00') 05:05:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4020940d, &(0x7f00000006c0)=0x1) 05:05:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xfffffffe}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:38 executing program 4: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0xc000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0xffffff4c, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0x89f51fc9d03650d}, 0x20) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000080)) [ 2189.428271][ T3418] overlayfs: unrecognized mount option "u" or missing value [ 2189.461053][ T3426] overlayfs: unrecognized mount option "u" or missing value 05:05:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x168, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:38 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:05:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x7ffffffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x8008af00, &(0x7f00000006c0)=0x1) 05:05:38 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x54, 0x1, {"ee2500bcccbeb55cef31fc319a5d4f8b8297c4ccef11ecac4f146e1ba3a0cf2786bfa7edc4e5e687c18a9448c057c651ed4450d335d28ab76186fe53"}}, {0x0, "387a66ecd7e5cdddeddecc7cb9858be09cb73df010641efa02f8b10c980cd5effe2097e8e4384e616eda1016f68cbe37020d22f83ba05ce9cd4ffef200b90a060b5b145f156179cd99b2d751006d76547fb9e80039d9e3347b043a828b7177c5dec4383cb3351a467ff67982f8407fd28b08b676a1929be9b122359b363fd8c6f15a8e59a8b93c716e5e99e9671903af5b2ba865dc9ed37c42697698c3dbc926bc054f60a40bbddc84dba1fff4a20d516330ed382b7c0aa42105518e550e4d01bb28f941bb459e"}}, &(0x7f0000000540)=""/4096, 0x11d, 0x1000, 0x1}, 0x20) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x4000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0045878, &(0x7f00000006c0)=0x1) [ 2189.627892][ T3450] overlayfs: filesystem on './file0' not supported as upperdir 05:05:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x169, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x206, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/ptmx\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000001, 0xa4000) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000140)={[{0x3, 0x9, 0x1, 0x4, 0xa07b5b4, 0x100000001, 0x7, 0x40, 0xffffffffd1f4b508, 0x1359, 0x7, 0x7, 0x5}, {0xa43, 0xa96e, 0x7fffffff, 0x6, 0xff, 0x5, 0x3, 0x6, 0x7fff, 0x0, 0x0, 0x0, 0x36}, {0x616a90ea, 0x10001, 0x0, 0xe50c, 0x0, 0x100, 0x8, 0x3, 0x0, 0x12, 0xfffffffffffffffb, 0x3, 0xffffffff}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000740)='net/dev\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), 0x4) pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00'}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000500)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000100), 0x0) getegid() dup2(r0, r5) shmat(0x0, &(0x7f0000107000/0x4000)=nil, 0x4000) 05:05:39 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000040)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x40030000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0045878, &(0x7f00000006c0)=0x1) 05:05:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf0ff7f00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x16a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2190.407835][ T3487] overlayfs: filesystem on './file0' not supported as upperdir 05:05:39 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) fadvise64(r0, 0x0, 0x2, 0x3) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0189436, &(0x7f00000006c0)=0x1) 05:05:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x16b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf0ffffff7f0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc020660b, &(0x7f00000006c0)=0x1) 05:05:39 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)="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", 0xffffffffffffffca) 05:05:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x207, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:40 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d2e2f66696cb4092b0b65302c6c6f7765726469723d2e2f6669c845caf974aeaeebeafd6c6530ac776f4aad07000000000000000666726b64"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x2) 05:05:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf0ffffffffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x16c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0xfb91}, {0x100, 0x1, 0x7, 0x1}, {0x81, 0x3, 0x3f, 0x80}, {0xfffffffffffffbff, 0x1, 0x3ff, 0xffffffff}, {0x3, 0x41f8, 0xffffffff, 0x7}, {0x5, 0xc8e, 0x3f, 0xfffffffffffffffd}, {0x200, 0x2, 0x5}]}) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa21a89812e1bf80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:05:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x300) [ 2191.248842][ T3544] overlayfs: missing 'workdir' 05:05:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x16d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2191.302836][ T3554] overlayfs: missing 'workdir' 05:05:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@allocspi={0x104, 0x16, 0x607, 0x0, 0x0, {{{@in, @in=@dev}, {@in6=@dev, 0x0, 0x33}, @in6=@ipv4}, 0x0, 0xc3b3}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0x104}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x101c2) tee(r0, r1, 0x8, 0x4) ioctl$RTC_AIE_ON(r1, 0x7001) 05:05:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x20000001) 05:05:40 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x4) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2191.510777][ T3586] overlayfs: filesystem on './file0' not supported as upperdir 05:05:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x300) 05:05:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x200000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x208, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4080, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x4, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x69c}, &(0x7f0000000200)=0xc) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:41 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x3, 0x5}) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000880)={0xa, 0x1, 0x80000001, 0xc1}, 0xa) sendmmsg$inet_sctp(r1, &(0x7f0000000800)=[{&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x15}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="8b6ee29ab97bb92cae0758c5eadde13483ba7eb89c70b62554f71f2f36ac5421fde36b52473e923633776695fcfffd1b2a05b853126fb47fdb7aff5adefb792c50b3c52048deee4033bdd7971a74b2b31d59287514227c97c4b99833f501d0bb9880ab41a89f295d0e67d8b34b8eca33b05341b87bd429676f3110c9e938cbd4ca732c983789c2eff222de6f9037c8218dd345539becd4d04e192c081845290062610e0351ec6af8a4b42822835898750885c972de995e3326e98a9479fdfbb33771589b5d7406f26e4464ebf46a08d3a81281655a8ee0a8a99df0bcb83ce3cd989dffc4bf9f8038d90db7ae8de5d4", 0xef}, {&(0x7f0000000440)="134be0d6f2a28f18877f39ffd3dda984521d459e49878906752529ee0db8d0567d33a912dd436d362e9ecb7ce324401d4d71463c", 0x34}, {&(0x7f0000000480)="3592fa2fb23100df3de6e9b628265ef9ddfa13e82184a56f1e3700cfdf87c4bbd673f99dbf", 0x25}, {&(0x7f00000004c0)="923f5ede3056ba50d01eacd8f750861b7b55c5e95a174ebf9515f92c47bd1e06b92fb3b7c1a1a9c9b5fc6146f3d53b1569aea0", 0x33}, {&(0x7f0000000500)="cd1f5bda3d1757f1de3ae7b50900939db383984af585e8d002b23fac875c2c33b27d7309d838e6d3d499a14fcf94f8a765bbb9efe7666fa74999cbe0fa", 0x3d}], 0x5, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x5, 0x6, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x40, 0x20008000}, {&(0x7f0000000600)=@in6={0xa, 0x4e20, 0x28f, @empty, 0x8001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="5944a3fb70537df7df71b974e18cafbc1aa27c1b4f968ef95bd82a80d857b15ee37403a8ba2fafa99074e2fa39b544924d04401c9b421d80d7ccabe794", 0x3d}, {&(0x7f0000000680)="226110417e51e89cbde2b6c7a712822505b5e19ebe8e13f9fb4073cf8af5ae2b1a162cf8d9975c04c1a9950989b92cd3409934f2369f7f6b45dfc44ba58168ba02710b76f14af8d5202f4bf860440eff40cdbdc010939518481eb5b938918342920008fee7efd3d1705b2f6469379bee5bdbb4c0aad8c3f76b16a7ffda08a26b5444e2f76fbd56b6cc936c3a7630a3579cdb845cce570ea9a8f5cbb5e80850331d0bd928e003fc68814beb1c9e9a7278c4f9b3318b819e33", 0xb8}], 0x2, &(0x7f0000000780)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @init={0x18, 0x84, 0x0, {0x8459, 0xd9, 0x9, 0xffff}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x200}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xc5, 0xc, 0x7, 0xffffffff, 0x1, 0x4, 0xfffffffffffffff8, r4}}], 0x78, 0x4000}], 0x2, 0x0) 05:05:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xa00000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2192.163929][ T3608] overlayfs: filesystem on './file0' not supported as upperdir [ 2192.174364][ C1] net_ratelimit: 22 callbacks suppressed [ 2192.174371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2192.185847][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2192.191681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2192.197480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2192.203272][ C1] protocol 88fb is buggy, dev hsr_slave_0 05:05:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2192.209112][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x16e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:41 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000700)) getresgid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = accept4$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x1c, 0x80800) fcntl$getownex(r0, 0x10, &(0x7f0000000880)={0x0, 0x0}) getresuid(&(0x7f00000008c0)=0x0, &(0x7f0000000900), &(0x7f0000000940)) lstat(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, r1, 0x0, 0x32, &(0x7f0000000a40)='md5sumloGPLnodevselfcpuset}$}]vboxnet1.#:$cgroup.\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000bc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) sendmsg$unix(r0, &(0x7f0000000dc0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000002c0)="09a468d86f09c70998ca9e20412e8d22189993aa8892fed93604553fc0acf65d5fe57db99ff1defd3c84e2a47192cc6ff4adc5d354cca8e7513b5cdd1effd9bfd7440019cd922ffd0096bb8df7b23ea2e2d6e8bb4388e3633937dfb9f55fc8ab90a41ff997c79585bbeb9096c10e3fd9cf10886675", 0x75}, {&(0x7f0000000400)="5efe81ab0cfc04d3d7ac96914ff2617b6c9e6178247976e4a5449675078d5d74e505045bfabc7bf782fb8805915850f839403319fb418d57a5d5545297b5c5f7c9c782a3baf1fadf2749ff3045b0b6ed973c65621397b08872150b2d222487fdf25b0f5c8a07ae0f0f2578ca8925b62201f63eb684842984f4dad8c365889442ac8d69359d40e3f710caf052e4d25442eec8440b38d1b8316408c400c15341156b06a4af3737ba4c591aa6b5a3c4335ac204535432c16501646b419119b45258cbd536b9f6710042c47466add48ea58b1ccc409660a9715184b508385581c849437f8d340ff0f3be756ddf9e31e41b7f4dea5915552c", 0xf6}, {&(0x7f0000000340)="82ffad524081d1f6294a2a80292842892a3c30cb51c6ad73a068f744d0d7cefa94b1e6f1f3fe1e57f07a0378181b8435097483ae330a6819060b55ea4fcac8f83d2481464c9dee733de88cc3b275407b89e6eadc397232a7f9be500dc708a61f9150992ad494fa36804cd4dd6cebefc3fc", 0x71}, {&(0x7f0000000500)="2237adaef35f13f0790fd5fb086f26cfdcaf339dd5037fbceb38819b574c8dcc9093a66860165efde30add6cbe79dc3ce257a3fb01c76d9f1da3fe140c6b419afb60b69d0606171586ef1a73375f7b9990f39fe21601d92acbed0760c0e4f1408e83f2e333f6bc1662a12e7cd868289df8826bd776f87843bb1e7af5ed8e77421d8b6013e2a0ce639c120b57091867312fbd5283a3291ac14b8afe85ee3c9e9f313dbd55d8cebbbc4c991cef4efe91fc733918e9cf7d87f71d8fae12faad7f7921f1feb5137d72b6b6bbfd5b1ec4b70c919743a0f8c000b5b2", 0xd9}, {&(0x7f0000000600)="1736bb49dcd159da03d4aa9a028c455003f05c13b62fd13129a4cb4d119ae052b6229f8c8b4f009998f8704d545091335971809537971cb3b24e59d06c7191d0840e007e20d5e974d1eeffc04a42de56efa9e34392885d6deb03d04ff8c332266cefbe8cf3cfeee06164da0550", 0x6d}], 0x5, &(0x7f0000000c80)=[@rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}, @rights={0x30, 0x1, 0x1, [r1, r5, r0, r0, r1, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r0, r0, r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r0, r1, r0, r1, r0]}], 0x138, 0x4}, 0x10) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2192.254270][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2192.260127][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x1100000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2192.351560][ T53] Bluetooth: hci0: Frame reassembly failed (-84) 05:05:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000380)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00000003c0)={0x1, r1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x501802) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x7, 0x0, 0x2, 0x7, 0x17, 0x10001, 0xddc, 0x6a}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x3f00000000000000, 0x1, 0x86}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000640), &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e22, 0x1, @loopback}}, 0xffff, 0x34b, 0x7ff, 0x6, 0x2}, &(0x7f00000007c0)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000540)={r3}, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r4, 0xffff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x8}, &(0x7f0000000300)=0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000400)={0x10001, 0x3, 0x8}) [ 2192.398387][T21880] Bluetooth: hci1: Frame reassembly failed (-84) 05:05:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x16f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x3f00000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2192.451571][ T3641] overlayfs: filesystem on './file0' not supported as upperdir [ 2192.734305][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2192.740147][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x209, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:41 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getdents64(r0, &(0x7f0000000140)=""/70, 0x46) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) socket$pptp(0x18, 0x1, 0x2) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2193.016894][ T3667] overlayfs: filesystem on './file0' not supported as upperdir [ 2194.415757][T30621] Bluetooth: hci0: command 0x1003 tx timeout [ 2194.415774][ T8548] Bluetooth: hci1: command 0x1003 tx timeout [ 2194.423635][ T3632] Bluetooth: hci0: sending frame failed (-49) [ 2194.435296][T21880] Bluetooth: hci1: Frame reassembly failed (-84) [ 2196.504363][T30621] Bluetooth: hci1: command 0x1001 tx timeout [ 2196.510416][T30621] Bluetooth: hci0: command 0x1001 tx timeout [ 2196.510610][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 2196.522820][ T3680] Bluetooth: hci0: sending frame failed (-49) [ 2196.529850][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 2198.414401][ C1] net_ratelimit: 20 callbacks suppressed [ 2198.420115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.425899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.431653][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.437372][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.443104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.448887][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.494330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.500119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2198.574410][ T8548] Bluetooth: hci0: command 0x1009 tx timeout [ 2198.580464][ T8548] Bluetooth: hci1: command 0x1009 tx timeout [ 2198.974343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.980177][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:05:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000880)={0xa, 0x1, 0x80000001, 0xc1}, 0xa) sendmmsg$inet_sctp(r1, &(0x7f0000000800)=[{&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x15}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="8b6ee29ab97bb92cae0758c5eadde13483ba7eb89c70b62554f71f2f36ac5421fde36b52473e923633776695fcfffd1b2a05b853126fb47fdb7aff5adefb792c50b3c52048deee4033bdd7971a74b2b31d59287514227c97c4b99833f501d0bb9880ab41a89f295d0e67d8b34b8eca33b05341b87bd429676f3110c9e938cbd4ca732c983789c2eff222de6f9037c8218dd345539becd4d04e192c081845290062610e0351ec6af8a4b42822835898750885c972de995e3326e98a9479fdfbb33771589b5d7406f26e4464ebf46a08d3a81281655a8ee0a8a99df0bcb83ce3cd989dffc4bf9f8038d90db7ae8de5d4", 0xef}, {&(0x7f0000000440)="134be0d6f2a28f18877f39ffd3dda984521d459e49878906752529ee0db8d0567d33a912dd436d362e9ecb7ce324401d4d71463c", 0x34}, {&(0x7f0000000480)="3592fa2fb23100df3de6e9b628265ef9ddfa13e82184a56f1e3700cfdf87c4bbd673f99dbf", 0x25}, {&(0x7f00000004c0)="923f5ede3056ba50d01eacd8f750861b7b55c5e95a174ebf9515f92c47bd1e06b92fb3b7c1a1a9c9b5fc6146f3d53b1569aea0", 0x33}, {&(0x7f0000000500)="cd1f5bda3d1757f1de3ae7b50900939db383984af585e8d002b23fac875c2c33b27d7309d838e6d3d499a14fcf94f8a765bbb9efe7666fa74999cbe0fa", 0x3d}], 0x5, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x5, 0x6, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x40, 0x20008000}, {&(0x7f0000000600)=@in6={0xa, 0x4e20, 0x28f, @empty, 0x8001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="5944a3fb70537df7df71b974e18cafbc1aa27c1b4f968ef95bd82a80d857b15ee37403a8ba2fafa99074e2fa39b544924d04401c9b421d80d7ccabe794", 0x3d}, {&(0x7f0000000680)="226110417e51e89cbde2b6c7a712822505b5e19ebe8e13f9fb4073cf8af5ae2b1a162cf8d9975c04c1a9950989b92cd3409934f2369f7f6b45dfc44ba58168ba02710b76f14af8d5202f4bf860440eff40cdbdc010939518481eb5b938918342920008fee7efd3d1705b2f6469379bee5bdbb4c0aad8c3f76b16a7ffda08a26b5444e2f76fbd56b6cc936c3a7630a3579cdb845cce570ea9a8f5cbb5e80850331d0bd928e003fc68814beb1c9e9a7278c4f9b3318b819e33", 0xb8}], 0x2, &(0x7f0000000780)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @init={0x18, 0x84, 0x0, {0x8459, 0xd9, 0x9, 0xffff}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x200}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xc5, 0xc, 0x7, 0xffffffff, 0x1, 0x4, 0xfffffffffffffff8, r4}}], 0x78, 0x4000}], 0x2, 0x0) 05:05:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x4a03000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:51 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x20002) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file1\x00', 0x7, 0x2, &(0x7f0000000400)=[{&(0x7f0000000240)="edfa028feefc894c2c3ad0fc6dcfa65ef5385ca3857a574c1f046d9758b02127c82eadaf4eb8c0e5d7e46d3c8848a927ceeb0b35fa7f99cba20ed6cbdea1a9994fe36402f29375218ca17e171e10", 0x4e, 0x7ff}, {&(0x7f00000002c0)="255a7a94875714cf61b753d75b1b0b64bb398703a151dfeaa06ddf35646d1e302ee7f34d72ef2118062bd3f38f2283153585895fbb6d865127446734a45f5fe9b14ae340a9e3bfbdeaa5f6a18205b04f311f75e94cfa07f7b43e7bdbc05899ed3d4c87f659fbf689233238f198e61692a5e220879f689d8296968272c3840bbd4b48b9835a95ca91bf7dbe691715b091f29b3af621b89961d3b3752bdbe21109e3646be7249466fb5e3a3afd335f31d65aff417596d8d68e71f5030d22c97c62ac457f4c7d5fffed6af5f47849a56f1ba7ff139b8f64de0e7576aa10e633993295b60664baa51c46a38180e57860", 0xee, 0x2}], 0x400, 0x0) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000440)='./file1\x00', r1, r2) 05:05:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x4000) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000240)={0x8, 0x20, &(0x7f0000000140)="526b7baf311fe9feaad66bde643483c645d75cd32a99f1b61a37ae3a4296d2408f705dd56bf4e3dd333013be5c3f76b7539f59c15eb920c6b964aeca0958a8f2d7aa0ee36c172cef2849c946daee617ab1727fa184f2ddd0dd89ace3332fffadc231d699e63edfa3b52abdae63367b1b3ca90fbf0efa5ca373619b28d32370c9aa3134d5656274fc3ef3472a1a46b3ea07d984d674b4c9a2840d0b4abdd5974b6a756a7e8b9538f2918238841ef244023b52bd24b2414d018febc66a0de570bb036beddd5d389dcf4c6134fef76b932d07", {0xfffffffeffffffff, 0x0, 0x30385056, 0xf, 0x3, 0x49e, 0x6, 0xfffffffffffffff9}}) 05:05:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x170, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x20a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:05:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x803e000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2202.808100][T21880] Bluetooth: hci0: Frame reassembly failed (-84) [ 2202.812250][ T3706] overlayfs: filesystem on './file0' not supported as upperdir 05:05:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:05:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x171, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:05:51 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:05:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xc000000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:05:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @multicast1}, {0x306, @remote}, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 'ifb0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESDEC=r1]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2203.074640][ T3736] overlayfs: filesystem on './file0' not supported as upperdir [ 2204.654304][ C1] net_ratelimit: 20 callbacks suppressed [ 2204.654312][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.665833][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.671595][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.677387][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.683145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.688915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.734290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2204.740101][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2204.814308][T30621] Bluetooth: hci0: command 0x1003 tx timeout [ 2204.820425][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2205.214347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2205.220156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2206.894384][T30621] Bluetooth: hci0: command 0x1001 tx timeout [ 2206.900472][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2208.984395][T30621] Bluetooth: hci0: command 0x1009 tx timeout [ 2210.894361][ C1] net_ratelimit: 20 callbacks suppressed [ 2210.894370][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.905857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.911614][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.917389][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.923145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.928912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2210.974311][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2210.980113][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2211.454369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2211.460166][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:06:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000880)={0xa, 0x1, 0x80000001, 0xc1}, 0xa) sendmmsg$inet_sctp(r1, &(0x7f0000000800)=[{&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x15}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="8b6ee29ab97bb92cae0758c5eadde13483ba7eb89c70b62554f71f2f36ac5421fde36b52473e923633776695fcfffd1b2a05b853126fb47fdb7aff5adefb792c50b3c52048deee4033bdd7971a74b2b31d59287514227c97c4b99833f501d0bb9880ab41a89f295d0e67d8b34b8eca33b05341b87bd429676f3110c9e938cbd4ca732c983789c2eff222de6f9037c8218dd345539becd4d04e192c081845290062610e0351ec6af8a4b42822835898750885c972de995e3326e98a9479fdfbb33771589b5d7406f26e4464ebf46a08d3a81281655a8ee0a8a99df0bcb83ce3cd989dffc4bf9f8038d90db7ae8de5d4", 0xef}, {&(0x7f0000000440)="134be0d6f2a28f18877f39ffd3dda984521d459e49878906752529ee0db8d0567d33a912dd436d362e9ecb7ce324401d4d71463c", 0x34}, {&(0x7f0000000480)="3592fa2fb23100df3de6e9b628265ef9ddfa13e82184a56f1e3700cfdf87c4bbd673f99dbf", 0x25}, {&(0x7f00000004c0)="923f5ede3056ba50d01eacd8f750861b7b55c5e95a174ebf9515f92c47bd1e06b92fb3b7c1a1a9c9b5fc6146f3d53b1569aea0", 0x33}, {&(0x7f0000000500)="cd1f5bda3d1757f1de3ae7b50900939db383984af585e8d002b23fac875c2c33b27d7309d838e6d3d499a14fcf94f8a765bbb9efe7666fa74999cbe0fa", 0x3d}], 0x5, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x5, 0x6, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x40, 0x20008000}, {&(0x7f0000000600)=@in6={0xa, 0x4e20, 0x28f, @empty, 0x8001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="5944a3fb70537df7df71b974e18cafbc1aa27c1b4f968ef95bd82a80d857b15ee37403a8ba2fafa99074e2fa39b544924d04401c9b421d80d7ccabe794", 0x3d}, {&(0x7f0000000680)="226110417e51e89cbde2b6c7a712822505b5e19ebe8e13f9fb4073cf8af5ae2b1a162cf8d9975c04c1a9950989b92cd3409934f2369f7f6b45dfc44ba58168ba02710b76f14af8d5202f4bf860440eff40cdbdc010939518481eb5b938918342920008fee7efd3d1705b2f6469379bee5bdbb4c0aad8c3f76b16a7ffda08a26b5444e2f76fbd56b6cc936c3a7630a3579cdb845cce570ea9a8f5cbb5e80850331d0bd928e003fc68814beb1c9e9a7278c4f9b3318b819e33", 0xb8}], 0x2, &(0x7f0000000780)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @init={0x18, 0x84, 0x0, {0x8459, 0xd9, 0x9, 0xffff}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x200}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xc5, 0xc, 0x7, 0xffffffff, 0x1, 0x4, 0xfffffffffffffff8, r4}}], 0x78, 0x4000}], 0x2, 0x0) 05:06:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x172, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xc03e000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:01 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) fchdir(r0) setxattr$security_smack_entry(&(0x7f0000000300)='./file1\x00', &(0x7f0000000480)='security.SMACK64\x00', &(0x7f0000000440)='workdir', 0x7, 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x6) 05:06:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x20b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:01 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b646b723d2e2f66696c65315c0045093bd926ec6f1c1c1aa0a4bf"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2212.981222][ T3758] overlayfs: './file0' not a directory [ 2213.001630][ T26] audit: type=1804 audit(1551589561.926:477): pid=3743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir291748992/syzkaller.Cqx5PT/3436/file0/file0" dev="overlay" ino=352394 res=1 05:06:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x7b12614cb89310bb) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x20, 0x0) r3 = pkey_alloc(0x0, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) pkey_free(r3) 05:06:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xe03f030000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2213.052220][ T53] Bluetooth: hci0: Frame reassembly failed (-84) 05:06:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/l2cap\x00') ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000300)=0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000200)="7e37470442cdc79be1ad5a1be1a6294163b14ea875e7062d57e94f8ab8ac3c27348dabaebb42c022de8a020d197c06e5e44e0d655a9473bacb5092d251a98e692168d7173f4b15d4c5dc2e2a302c846b69be338c685e584a7ca539a4aefc73e164b1e4c728a1ef50617832ec991dcdff4205f6c13e2c2cb10c2eb2e1228244a465af6bf65fbf20935cfabe5351449261edab1dbb5df7eb7bf4e176a1c07ce70e307aee613c330834979c17b532de1668d3efeacb3d8cec13d98dce54b9ce115833f99e") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xe826000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xeffdffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2213.137536][ T3773] overlayfs: unrecognized mount option "workdkr=./file1\" or missing value [ 2213.173847][ T3782] overlayfs: unrecognized mount option "workdkr=./file1\" or missing value [ 2215.054507][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 2215.060670][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2217.134348][ C1] net_ratelimit: 20 callbacks suppressed [ 2217.134357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2217.145908][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2217.151673][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2217.157479][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2217.163241][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2217.169081][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2217.175033][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 2217.181095][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2217.214355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2217.220136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2217.694310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2217.700127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2219.214430][T19629] Bluetooth: hci0: command 0x1009 tx timeout 05:06:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000880)={0xa, 0x1, 0x80000001, 0xc1}, 0xa) sendmmsg$inet_sctp(r1, &(0x7f0000000800)=[{&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x15}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="8b6ee29ab97bb92cae0758c5eadde13483ba7eb89c70b62554f71f2f36ac5421fde36b52473e923633776695fcfffd1b2a05b853126fb47fdb7aff5adefb792c50b3c52048deee4033bdd7971a74b2b31d59287514227c97c4b99833f501d0bb9880ab41a89f295d0e67d8b34b8eca33b05341b87bd429676f3110c9e938cbd4ca732c983789c2eff222de6f9037c8218dd345539becd4d04e192c081845290062610e0351ec6af8a4b42822835898750885c972de995e3326e98a9479fdfbb33771589b5d7406f26e4464ebf46a08d3a81281655a8ee0a8a99df0bcb83ce3cd989dffc4bf9f8038d90db7ae8de5d4", 0xef}, {&(0x7f0000000440)="134be0d6f2a28f18877f39ffd3dda984521d459e49878906752529ee0db8d0567d33a912dd436d362e9ecb7ce324401d4d71463c", 0x34}, {&(0x7f0000000480)="3592fa2fb23100df3de6e9b628265ef9ddfa13e82184a56f1e3700cfdf87c4bbd673f99dbf", 0x25}, {&(0x7f00000004c0)="923f5ede3056ba50d01eacd8f750861b7b55c5e95a174ebf9515f92c47bd1e06b92fb3b7c1a1a9c9b5fc6146f3d53b1569aea0", 0x33}, {&(0x7f0000000500)="cd1f5bda3d1757f1de3ae7b50900939db383984af585e8d002b23fac875c2c33b27d7309d838e6d3d499a14fcf94f8a765bbb9efe7666fa74999cbe0fa", 0x3d}], 0x5, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x5, 0x6, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x40, 0x20008000}, {&(0x7f0000000600)=@in6={0xa, 0x4e20, 0x28f, @empty, 0x8001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="5944a3fb70537df7df71b974e18cafbc1aa27c1b4f968ef95bd82a80d857b15ee37403a8ba2fafa99074e2fa39b544924d04401c9b421d80d7ccabe794", 0x3d}, {&(0x7f0000000680)="226110417e51e89cbde2b6c7a712822505b5e19ebe8e13f9fb4073cf8af5ae2b1a162cf8d9975c04c1a9950989b92cd3409934f2369f7f6b45dfc44ba58168ba02710b76f14af8d5202f4bf860440eff40cdbdc010939518481eb5b938918342920008fee7efd3d1705b2f6469379bee5bdbb4c0aad8c3f76b16a7ffda08a26b5444e2f76fbd56b6cc936c3a7630a3579cdb845cce570ea9a8f5cbb5e80850331d0bd928e003fc68814beb1c9e9a7278c4f9b3318b819e33", 0xb8}], 0x2, &(0x7f0000000780)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @init={0x18, 0x84, 0x0, {0x8459, 0xd9, 0x9, 0xffff}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x200}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xc5, 0xc, 0x7, 0xffffffff, 0x1, 0x4, 0xfffffffffffffff8, r4}}], 0x78, 0x4000}], 0x2, 0x0) 05:06:12 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c651d6afead01e360537f6b4b975e71302c6c6f7765726469723d2e2f66696c6535d1776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:06:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getflags(r0, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xf6ffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x20c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x173, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xfeffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2223.206005][ T3808] overlayfs: missing 'workdir' 05:06:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x1, 0x2400) sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000300)="8fa82fd8dd6acefce90f63839ac29aa20e73ede8eef4c3d0067a2cc5220ba12ba81a5754a863c8271906117a1d5f3b096a529c5890a5e1b1efad4fb97ddb94bbd0c7d976d61efcc49b23104ffca2283f78e4503c0637636cdac39d08666432740ee3473bd121a4699990239d6ba04bcbd89bbe049729dfde0df3fc75a66556f8863ee830957f54c518ff3387db0c", 0x8e}, {&(0x7f00000003c0)="845d8daf3d21f2774aecd206aaddcdebc4eddd52185918b5bebb0e1c8713c1bc34f89d6205b9542d0fc906317aebbf35f3a07e5ac0eee4fef73ff79adeca21a8bc19bd9bc62729c45748a5d55e5efe1abe62fdac29b41d93210a043a4c47124ee7cc43a8c6170a793325c25f037cf8e6d24b00c36eda80b93e39e6a2e3a99a1802c9bfbd773d259bb868aa00bedbf6b5d1f22430f3369198a15cd91f3eed4854", 0xa0}], 0x2, 0x0, 0x0, 0x4800}, 0x90) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0xa, 0x6, 0x10000, 0xffffffff, 'syz1\x00', 0x1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000004c0)=0x208000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000500)={0x2, 0x35365f4e, 0x6, 0x80000000, 0x0, @discrete={0x8, 0xffffffff}}) [ 2223.265876][ T3813] overlayfs: missing 'workdir' 05:06:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xffffff7f00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x174, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:12 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765725f16994adc2d007cecc6bd3fb20a1a036469723d2e2f665e6c65302c77c2726b6469723d2e2f66696c65315c004a62e33ead85753f0fef96fa650c934d7a48f157c2c876cd203b883f7b6e5ed89f8963531a7a8f8a32247f760550540b026f856144508bed"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) 05:06:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xffffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2223.374333][ C1] net_ratelimit: 20 callbacks suppressed [ 2223.374340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.385905][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.391703][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.397584][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.403374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.409163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.437682][ T3837] overlayfs: unrecognized mount option "lower_™JÜ-" or missing value [ 2223.454293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.460076][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.480529][ T3841] overlayfs: unrecognized mount option "lower_™JÜ-" or missing value [ 2223.944321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.950267][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2225.294314][ T8548] Bluetooth: hci0: command 0x1003 tx timeout [ 2225.300446][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2227.374301][T30621] Bluetooth: hci0: command 0x1001 tx timeout [ 2227.380482][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2229.454356][ T8548] Bluetooth: hci0: command 0x1009 tx timeout [ 2229.614330][ C1] net_ratelimit: 20 callbacks suppressed [ 2229.620038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.625790][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2229.631562][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.637324][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2229.643097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.648860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2229.694368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2229.700194][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2230.174389][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2230.180225][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:06:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000880)={0xa, 0x1, 0x80000001, 0xc1}, 0xa) 05:06:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) 05:06:22 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:06:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x20d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x175, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0xfffffffffffff000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180), 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x2, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x8001, 0x0, &(0x7f00000005c0)=""/156, 0x0, 0x1f002}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000480)={@remote, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@local, @in=@remote, 0x4e20, 0x0, 0x4e20, 0x7, 0x2, 0x80, 0xa0, 0x8, r2, r3}, {0xfffffffffffffeff, 0xf3, 0x7, 0x800, 0xf429, 0x1ff, 0x6, 0x8}, {0x0, 0x401, 0x6, 0x2}, 0x8, 0x6e6bb8, 0x2, 0x0, 0x2, 0x3}, {{@in=@multicast2, 0x4d5, 0x6becbfa68edc5ba7}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3503, 0x2, 0x3, 0x10001, 0x8001, 0x100000001, 0x6}}, 0xe8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x6, 0x3, [0x1f, 0x2, 0xff]}, &(0x7f0000000380)=0xe) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x40}}}, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r5, 0x7fff}, 0x8) 05:06:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:22 executing program 2: mkdir(&(0x7f00000003c0)='./bus\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c7b302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0011f81ed225b2b0235db068ae5610507a568c58b7694e865ba365156df019ac4ae6a1e28949ee64ef489a2fb8588625422ebbf062e9b292eabd80f657d0794a302ea6ae457f228d016b53a3c17c798a560a412ca3c00120b819239569930f6d9c1d22eb2f5b5b761f891339323601a4a77b479feebc0ae9c8308ceeb5e38acc1ea717d1a51a404eb0b30122239aa5072776ba00465b88d07187d96d9e11d8ed69d0a6207196d091c10319763dc650b767d9aaf7132a60606bce8778"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18, 0xf, 0x1, {{0x50, 0x0, 0x1}}}, 0x18) 05:06:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x176, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2233.452208][ T3868] overlayfs: filesystem on './file0' not supported as upperdir 05:06:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2235.454302][T19629] Bluetooth: hci0: command 0x1003 tx timeout [ 2235.460599][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2235.854273][ C1] net_ratelimit: 20 callbacks suppressed [ 2235.854278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.865814][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.871568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.877311][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.883055][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.888790][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2235.934307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2235.940088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2236.414258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2236.420067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2237.534280][ T8548] Bluetooth: hci0: command 0x1001 tx timeout [ 2237.540387][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2239.614273][T19629] Bluetooth: hci0: command 0x1009 tx timeout [ 2242.094276][ C1] net_ratelimit: 20 callbacks suppressed [ 2242.094282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2242.105807][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2242.111635][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2242.117399][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2242.123140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2242.128888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2242.174285][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2242.180039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2242.654318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2242.660199][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:06:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:06:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x5) 05:06:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c000328ee76caf8346d00"]) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x4, 0x204004) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file1/file0\x00', 0xffffffffffffffff, 0x5, &(0x7f0000001540)=[{&(0x7f0000000340)="9743a929fcfd656f67cbbc7bd69b6bb30774f0011b281f75f7def42f7e77106e6c0b73d05eb368ea85ecb5ca4e8f6c7cc0389e7a32898fb3f347f509fe7da2c1d03ce191800dbed0fba214a205cc21dadf2adcc557cf60b34673f00c1ac840fbd39ad131536cfa064dd177292953a54c7d6572c325dcc877da1d13aefd8b63bf147859cb70d47ca5c4ec76f620ccfc49a585e1d6f7f7a1679e2d0ae4b8ad3f40a85d4a999cd7a05c1276c614a5a5db75744b80be1ea7773941e2a7513e0e99efbbd402f99d6838058d7c22734ccc2971f1bcb5e01692970b99e8bc5e6ca2285d8e64e80e9a80cb499657294d8d77273acd2ae3fb8a5a17c24f0a5d330f62911c77a88f6df5d18ec3929bb64e956fa640135844c9e21620fbd8fbdb2917f3be56e363d06721a53c59a72de098d7fabeb05c28155d988f40579f697782e8f6a63d21da78ec2be68bb2d68decfd317437a2082cc4b20308e72b6f0c7a020cd573424c76fb6e875ae8d6f10cc3a873f373380ffefa319c21f373829e5a0f4ca0623b1fde7b7ca379b9762307ee91d4d296e261f3ee4c86b9d4f65eefbcd6eeaacef1f67d8d0bec495ad6ab26d29315c5eadfaccc1d681a5a331a1273294c99b69b016dca1284e70d1d4132754fa782daa39b4337efca73d4a7c3373412011878ff863527d9f45d21dcbabfe24a3462fbcbe3cf4cc3e31bba93d704aff0ed46fee3bba209e1e80eea58cfc669015ad5df4b3f6dc1229af592b1b4d4b56c2cebafa9f9a76d1333fbd843189e891d97b093f9d9508c0d07983b833afbcf7829042165ffe1c4c9b2f364877a3b8948ab6d5628d0aa01cfdf274ab6aaef9acd516345e4cfe5b155c1af68774ff72b88509d77897bb63d781797a7d0e0b4e53c421f8461df4383ce59e5050c79603869a99eb91c2274bd58ad06332cacbd1811ec0e7693671e43846f5a448ad0987391c1a20f85ae1cd343e4db4cfda0499b32ed5c56c1bd797efe70d4146181eb899c539f3f031966df8d3760b085f75f46234d33e69ab7149d035f9ff07a6cafae2b32ce15c1a40b16fed0ebfe897ae8cac702e2a13c734119e560babc17a64dcac396932174580722c8008f862499b16dbb40696ecf07136fbabf032d983f31f729b9f914209ab55c4e29c593e3dc015be78a3ad9f0883d389aa88764851991241c05a12b5c3329c5bf530c0b26d68498bd570dfe73a0783a6ec4b1b50e4845a5e962c00a85f7272a7a37d8cf64504ad255a0445bcd6cde86a499bcd301780e957d133ddd34bd0859e067e8255cace3d7bb519f45f63dfdedaa839391e50339a916426046199b93e3f58778416ff9dd12759d971652d1241741ca3ec422eead0d44a6e0cf8ed0bb74af9a91c888e3204699e9f3017b23f7e15c31b11926a8fe4dd7f71fc9c8fcaa02ea891974e6d85b6c8419dd9d06b8219922eb1945d434a1ba5eddc7cc81e9405e82ffbaeed62a1977175d4d2f22e12219a6b00eadc8560e01153d1a0c0a133e033a2e93abf1cf7443f94131f89b56c28e50ac4ba14da3bf4b90498505bdc0d4011bb6631a3b89c98212620484e7fe3c0badce3e65daed3f86f39237593de1619ad56457636ae3fdb1d2d51269042c653a5e760f1be803d9686905333e341df8ec8e3dd53f0dfc4786be8235a2dd1682d10bd4cb6fa097362b8228a8c815a13ecccdd2ce4a3bd59e07fb79884515ff4de9a4a4f0f0916725666313152091080e9c2ed8720fa4d7d4ea50632b42afd2548ace959f9e41e81b89ef38a20f24efe04f8f6264dec5e3c10f3ae66eb331e73f2e7244cea4447f4ced2d2729634b228b647dfd3716e61ed0d4a8ba338989fa673ecf56141b6fc1b3b6cbb69c514889c1b051076093a4289c324e4923b4c41fb04263da1e0e17a17e9f76c756f29ca76dc15f3baad41c356e874e72ebc279fed9ba61d6727bc089548c18a68478dcee21050c3d5562fe8c5bfac65d01066051501c5ad892efa39cda276bcbea3204b989b464240af3f8e95ec1f2a4df24c67255939415a25a599e21638c5fae91d507db422518e0f145252ff38290261c698edcad917f88dc93817b8769bb840d3d3d2ac7207c745440db397a06a86ee28c6f8fb336ebac7387b26c52fd8d415f00b82c34f1b6bbfc4a25bfd6db8f7d994d22dd8bd322f44ae1ff8dd7529a2c874ec4ca35b6ea863e9d2192c28bc53d7b356f39cd2fbcc25a05932c147b888ac159456f17d9611e9cff90074d9fbfb817743f6a1de10221863ba37673296e13ecb16e219bcb7c4e05e6720d02b954645cabbd4090ac79817f09bef0cc64163e6cabba5d5bba1cc449a5da016bea65d5a75aff08c8b51aea1db90d8d7138e16a0c199f548b4bee8383bf17e0d3689cc38589c648d960afc55897b734ef0b78a99ce49a73714af830dde4222034c690e4958f12128910647dbadf85ab2386bae964fdcb29b111e8e2f2bf91324d5c7c25883aa277883e30985c571a43a3803ae6a3ff855c1ef10c2bb970ce392bd533301e7682893809bc265b94805042fe8458933b8befaa5da16d301f7f068851dae042879cae6fd9a6da17a5c387f6d5a0e5ce84430c68a6a1cb6631da7e7c77a6cb3a94adcf3dac79ff60851a19f78542cedd07558ef98045e0e769fdb3b059972144d4f09c94e09a20928433603b2ae2b7af7f3722bd8ee390679dd9929987989fc86712f82cb2cf38340a5990cc2286b61d301baf59cf15ad8f46553fdcba5c962e2bcae1b7656afc9a243db7569bbe8f602cf687a8150a84e28e053f8361f73a239abe55d547bc73f16739af39da4a09c184b1171fc665c67c473a7f728088c04ab54ee78389a3d8868e99b89e1946ae2942c356dbac48249045b6db35475f5fac155519f134936684589132c58a83c4052551c5af50e9ae6c80c474d3d225a0c1221739812ae67d00b19a077044d5e81d80b264cfec4dfb1bf3de3d8e9e4483723e14f74253531452199e2d7b0ab906cbf2c0e2c1f468764a8544f1f48603db1c00e5e0611c758fc2e6f6d5054b861f70099f25537f67d8beb417f5ec00675eec1fb9045179503e96fbc9ee0d21115af80ed62ad28dd16b38c412a6308bdb9e2a5c9a39905cf09be933bcc9684ace49479c4d66ad34b36fe30d324070aaff1b3a1d6c86332196898da07ed1a499a063e5ddf81a0ff20c0519cb68a4999eb0f263c08d79cc39b1837f89d5abb854ea94daea0ada33720c27989d6e6d203adccc38f08b9db78b72a0bc487aa6e7aef1fb434789c664e964704ba779c6f8566f19541738dbd513cea48df12ce7fa8dbc8a9e8c4bc84b6a0dd93d91e4e864ec695e23c0f73aa20084aa53353782bdc884e782f89a32e84e7f0c842052c902ae3ad77c4e7bf8ec7d1bc40acad687f079de9716a7f08f3e0389a5af41ed7f26e02bc9a70cb70efff95a7e7d813c0dca8ce536e3302b21abf344b66f70794666b3ed4ceea6de14d74c8d31f152de092c735ab9a680eb94b9d63cd805e6e66c23006c131d3839e146485546f4166e6d6a5362af9a7140291517b2fe27663317593c3869cbf8d625ccde2b4010725c34c72055cd227e6fe748e1e740c9d5c9b16614ea18bfa5ccc23f9d6ea74cd554c508dfc93cf82f7733b3c10f552ec187fd07dee81496029c5f0e205c55d78456b2a1435f309e052f58a13bd94aebc7719f67834e073fec74ce52ee429367d7498201ab9b93a0e617d3e7eb2414ef09116dc91d2831fcd8128b667bb5036516521854867340fdce132b49d52c8745ce3fa9591519a0b92ee171ba2581895649495ec3fcc94949597086fa4df575725cbfcaab0e105874f7286d75fe0796d00e9ef5501fbab83eaf899f093fc2d7b73644d390304e76ba8b614db02e66febefcbbecb7aa20dc1dbc5d8c60ad2014fb0b0c5a6dd1b14ece537692a2655548faf05440396b963177a122a8b29d4a630523198cc0a3bf7f2abdb70043397dd173859f31fc355d32b40c0b7af7f30c52b57e16c47008fa035a64b6ab554a4b9cf6ad932b96a842cdf18f1cab511a2675204029f0515135c2f12b7efb9252bf59d4c07329f3511729f14ac7a7405f16da30d64469bcdd77d3832b84ce5e5a8ce05c69b0f81bba186b79859f7675cbec00abdedc4b6ec39fc75836a9e93e187ab97971b53a37159fb82c04f62cdcc7febe1b3a32ad4a2d5aec09419413867ef748aaa9de7d9330f593500f2910bcf40b8cb723d7a1a48bf73607baa7751d2403cca28ebd344c6fc7651eaa1ba05039d41540ac7be2cde374c7e8d5cb5d86ba2c9d963718d6e75208947ff9752185e71cc5b97437bbf427b784d856b6f9f43fcf3bb6e32d45ff1b5c6500165171d77f1182b75af2c23268487b6aeeee51c24d3a016823eb8018d2b795749b8ecbc20749720329c5ec67cf120dc6c8b4e88a7d5b37e87c75f011a61f57416112c7dd7993882f9d72da3edd69d7cebd0d0644af0662b0859c4d49851a6f03fb5f37906eb0baa2e467b7d703cfaf6d16e5ad97d120c48501917e8ecef43dcc878e4b2418636581ea101cbd861cdfa5a0d3481b1e5a669564bc3358e6c1fbd321157bfeab93e752bc16a79abb62f26b639b908c71f870a30a3b2b2717cbf4051ae5f14b49ac489ae138164a660f8193ff1cd5c5d1c32a5f890a3fdf962cbe20595cc5aa7b309ef95502c4e5f7ab7d8ca767eb208d7eecd3576a88daafdff53361f5c039b6168771fab6bd754e9116f1616301a03d7ed07e7346aa6d52456638c87a4ffee261350c747d5852ca2185e9ea2d313018504363586aff57fd008aafe9706685d4e0605a01093593d0264a14f86155015a4a060ececf6f0f9c0f1ee4d93804fa5101bce1c74a0c55438975d4b9a6b481db0ba6683610fd6019d1c13e89c136c8bd474104aef2e2cfc490e5694b82209de4723725f514036ed4af0e2a6c4814a831f98b3ddace7911cfba442657ef74d68a8cf05002b53162b327db780ad9105b7972a34f8055aaefc6df232baf032409c50325ba4f1c6f2cea1e3b868a2cf89cc390df649136556c3a8235ffb46ce344a1c3db48d8d295f5db8afc8cb5b823e02b193510aaf80e13d1e5e6b0dbd713e43d83b8152e2f032c3db4b0c10c01b33b7453bf7cfa55138de11a2d3b0325000a2b80f86c254b65ab5b5ea07e5e0cb2184cdd09b89b135f260f82d9e065e365a6550f974487470951f0362660666a38d513dd0260019002d75817790cd22bfa5135526adfcc4862df0cd8fe10628468bcca4e0fcf2e2277cc72269789f2724cb323f52fbe7a9e0388ef1bd1477b125f9a316da1d598cf52e1d7ab7dcc37738dc4ae94aa10d92717ff2b3fbd3f858f7fe286452fd4b7ba8c35316295f15db871e27c3df7a5e0fee478e304acabbafa283c6c2b850fcb6cd9f549cac3dc59d34717f629254321c58f3b2d35565715306a8ed88816975e7f6d5157cef65f28464494d89cbc3f4bd61f26dfc6eb0196cc235c90851d9a4d457a693bbe48b0dde1c685ff9eb248873934aab99f3a8697c8cf7c3aca7a4d6ee9315d56d8eb48e54a2c3f9639b1602223ee0e0604b63ad6251c1cbddc8191fb44bc58e2062787c3670b7654e35c75a7abfe551dbe4f4186212addb36a5fdf5d249b2c0191c1e83d93b4800c0eb267392e7a75cdfcd580fa59f82094834f31c8b032d4ae3930caa8d114bae5377b6fa407dfeff1f69057043b6ddec56a75725ae67c5b88a11376e53a115bed2cae65e4b51aa606f3a11eb394802f2abd42a598c3cea809c96df72ddb", 0x1000, 0x2}, {&(0x7f0000000240)="cfdaaea557f530246e7b79118166ff129ad65ef6725cad468906f41bc8d9184c90e22078", 0x24, 0x4}, {&(0x7f0000001340)="067ceb3d95f6c5e60603f19a05bad5e960b63f6db6bd7165877744d3dcd67e8a15de03447fdca66f2def9feff27a0d71401512522004de0ce75365a100082a5858cc495b593137bff4edb59112e90a599f76f1b0c1fe71fa0c92c7338977a37fc9136056cbbb39df6f4af95267872b555eabd7842bc2d0f68ba21020f5efac015e15c64d7b995589f8a6dd3b635f004d302bc8d778d101220ad49a9735e1a62797e7987d00a7df37066a026282ff8da331304a41babdc6883386b176fb", 0xbd, 0x8}, {&(0x7f0000001400)="875c828dcc9e7c9491ff48a324597cbc449b4bbec4da10e90a8d75c9795079e94a77b0b25a23232ca3b1322a0ebc923f272a99029eb3b2e23dc66b8d3a4a9d91d2d9c513820d25a4b9aa1b1efbfd22cc3b796fa9eab2aeab942df74114e6c50bda8fb2bb304b539ea624ed75b33b2225090e18d4a48346b41f5d08e5fa56ac70d28e5535daddb38de7449d03f4150c953278571785dfef4b5e36469bdfbd103ff53c67acb85542a51550fda21e7c5ce7900066f37eaad1901b3704661fd9f9466d5c1f27ce76eaf66a212e433b0f76e87069a75c8eaee1b361807cbd", 0xdc, 0x8}, {&(0x7f0000001500)="e329315c5dfe4057fb0bf35d4029fefcfcf556ac8984acdc400d900fa76655e9c71af56fee09afcf03ea", 0x2a, 0x3}], 0x80800, &(0x7f00000015c0)={[{@space_cache='space_cache'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}}, {@compress_force='compress-force'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x5}}], [{@subj_type={'subj_type', 0x3d, 'overlay\x00'}}]}) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='./bus\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_to_bond\x00', {0x2, 0x4e23, @remote}}) unlink(&(0x7f0000000000)='./file0\x00') 05:06:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x20e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x177, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000380)={0x0, r1, 0x5, 0x89, 0x4, 0x7}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2}, &(0x7f0000000400)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000440)={@mcast2, 0x2b, r2}) fsetxattr(r1, &(0x7f0000000300)=@known='trusted.overlay.redirect\x00', &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x11, 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r3) 05:06:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2243.672670][ T3924] overlayfs: filesystem on './file0' not supported as upperdir 05:06:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x178, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2243.719090][ T53] Bluetooth: hci0: Frame reassembly failed (-84) 05:06:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000240)={0x0, 0x7}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x2000, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000480)=0x4, 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000140)=""/176) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000380)=""/202, &(0x7f0000000200)=0xca) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) 05:06:32 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469a8ea7a28681190723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0xffffffffffffffe1, 0x7, 0x4, 0xcf80, 0x7}) [ 2243.879415][ T3955] overlayfs: unrecognized mount option "upperdi¨êz(hr=./file0" or missing value [ 2243.892790][ T3956] overlayfs: unrecognized mount option "upperdi¨êz(hr=./file0" or missing value [ 2245.774256][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 2245.780433][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2247.854321][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 2247.860424][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2248.344346][ C1] net_ratelimit: 20 callbacks suppressed [ 2248.344352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.355893][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.361645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.367386][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.373126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.378869][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.414309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.420063][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.894360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.900122][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2249.934376][T30621] Bluetooth: hci0: command 0x1009 tx timeout 05:06:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:06:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000400)=""/97, 0x0, 0x105000}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2082, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r1, 0x3, 0x1, 0x3ff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:42 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b643e5812257c770d229dfff769723d2e2f66696c65315c00e06d0e4700318d3d265124aed46ef901b4aece6921deecc68902a380e052a18bf85efc62de6b47efa91411b0015e1a777af405331fa6511f2bc6fc67a1ef23fd281f7b93da138122c1dcc4376f93e31e99c40a29a9447b312b1a4b4c68077a3317ebff957a870f846bcf19a8299b494340f49c331b617fc18d2f3776f164e6d5a2c021"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:06:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x20f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x179, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80400, 0x0) write$P9_RAUTH(r3, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x4, 0x2, 0x8}}, 0x14) fcntl$setstatus(r2, 0x4, 0x4002c00) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) connect$llc(r3, &(0x7f0000000240)={0x1a, 0x102, 0xffffffff, 0x83, 0x400, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1b0, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x114, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x127}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x25}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9241, @mcast1, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4f}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70f2fe1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) getgid() ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x2) 05:06:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2253.927670][ T3977] overlayfs: unrecognized mount option "workd>X%|w "ÿ÷ir=./file1\" or missing value [ 2253.962493][ T3981] overlayfs: unrecognized mount option "workd>X%|w "ÿ÷ir=./file1\" or missing value 05:06:42 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2effffffffffffffff6f7765726400723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:06:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:06:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYBLOB="c4e6c9a158a759c7bbe7868b9cd5d6d5dd5e8897c5e47612c358dc7acf8b7f991822cacabd77bc6198c87af7970e9fa5250cda28e25b3285c4acf6a0d8fc5c2144df43fcb6480bc2ed0372c42a82c40ae5f2e84cf923f202f8511081adabd6dc1a896735c20b5a63159b9295df4b28f5c5124cb65b8cbe299f5663d0eec850d7a80c", @ANYPTR64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:06:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2254.105502][ T3998] overlayfs: missing 'lowerdir' [ 2254.135298][ T4001] overlayfs: missing 'lowerdir' 05:06:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x200, 0x8000) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:43 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0x6e) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000240)={0x1670, 0x9, 0x2, 0x10001, 0x1, 0x6}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7570a4735ab269723d2e2f66696c6530c97a4c6983b8bdd92c00007765726469723d2e2f66696c65302c77ff03000069723d2e2f66696c65315c00"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x3, 0x4) 05:06:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2254.279745][ T4014] overlayfs: unrecognized mount option "up¤sZ²ir=./file0ÉzLiƒ¸½Ù" or missing value [ 2254.317248][ T4025] overlayfs: unrecognized mount option "up¤sZ²ir=./file0ÉzLiƒ¸½Ù" or missing value [ 2254.584331][ C1] net_ratelimit: 20 callbacks suppressed [ 2254.584338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.595784][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.601568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.607350][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.613114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.619041][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2254.654339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2254.660195][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:06:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x210, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x17a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x6}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:06:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000140)={0x4, 0x9, 0x5, 0x5}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:43 executing program 2: mkdir(&(0x7f00000003c0)='./file2\x00', 0xfffffffffffffffc) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7f65726469723d2e2f66696c65302c776f726b6469723d272f66696c65315c0075348c172a0556af22d13b779cce4368088d4ea347cbebdd0b13162ad2b821130fa49a28a2fea8a08143e52dc1ff309c986e9d1b199d4871bfaf7a398e9e2ae207b9da435a57bb293ae78cb9967936d345df9d6b53da2862555d16187fc54b15162114e62b82978a5e1aec542180870df9ec3d909a194a76bc1a79d71a3f0202c6b268384151c3ab2cef8a1bf35c51d39fda9cc0c1cc57c4b934d1a90436c25339872c3e94b447ae184431d5b6171528baecd03ab01905ee88faa646f95e04722a9d675dc7"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000400)="d6c82c0f83f65fba31b939e230ea767f06e47b87beec92ffbc75026d741ecdad2e5292cf550967fed17126833b435d3c983c7314a2bba5a93b5ca35b99ee0104ba940735f7b7eea9f1e168ffa789d806ab58eb531447b710df7337bd780821a3b2566feb65c41a87883240184ef0bca595a7d0d926f52d94d24a8958d8050a56bf5c195ee5b4d8110d11e6c6015e47181197f5397bafdc8aeef45992533f0076ce0091d84e043f201501950871a85fb4c27311065ebaccb7abdc6fdf1b644574f66778c8b41012c52ddc146bbc1dc7d6fe9e2d13466dcd4582ab3f23a76874f2638a091e72c47d22e786e431c7d19bbb30c67b106ccc0bd0941d4a66f3be2db3d5f741a45166d4d85d1b9299911c794110373539bad0f386b0e57c62c2f6d3216c339d24dce6117913e74158233956ab77a99efb520dc64080ae6fc5db362ab4176021c698e3710fa6320f9abae99a638f222d836c48d618e93d8d238800ec365f8e64ad4cf7b60bb992ffa609de49f3697a874c792b5cb2682f30e1bbfb7ed7a137f1e1a349034f91487e1670020b6106e12e54d581831c7a159f346a492932f51daa0c634d68fe9dfe99f3baf53da817504377060f036fbdae6f32238b46a82681238c3fec58f699b2954a2276bc009d304f04814a8a499872bbb2d710f8f03854fb432cc632195a98cd5309d3eb0b7cc2a5f67394450430e17321c161ebe531ede0f5e8870c0d243f1d4c2ca52666f526baedd041f1efcbba6c65396cb83a03dc8ffaf2efa19d8be7a8cf9b492211b5207b4b3c2018e62f2afd69130f09915c91ae8d844cb30d3adeb3e2ef789d887bec20fcbfd5df46c2fd29b9523629702bbb31b079cb0308d22220bd0eff80f21adb15239adef67381bbff73c5d68c7845fc49dc55e12a2e238fb36c2518371713144b939d48f33fab34a318047107c6f60d17250bc42a74fde21546be4250d58be070bf541a5d4771d5bb11fcdb99f0ff873ba93b21978ba2fdc6be23e031dc4ff65b49816c812b41230b6e4f2dcd7b5db68f34b95a5c985a7e39bd111f280a872e8d77f20850210eb42a2093094aba0b0e9af4fab3b45b06c5e9e4ca2116ad5943f43eafb43eb7ea941e38b172191dcd6dee6ffee3071ecce02629820142b7d930f0d567c0342349cb0a4f37103b869cbf3fee10ba43006d135bc43baeca3a57d7a11b598f1d482a8445a6a11d2c737fbc91716294ad3c615496bbd5cc7839a861f4ec806d51b3ed4e85e2b3e120ed26b7fff209ab570a5ac31322ac1c810421e4f89cea1c22aadc93548fa24fcd4e7734dbe3760e589972bbce5d019ed596e82390836ee2dd14b28b069d47aa79b064f08ebdb60a2617d9707cc5f046cf036a87d3b5d497d3ffbbd3de82b9a2b7d21340d7fe9385bc1273bf397b715b8ed35d8c0a65b53c76d7adf9b3a4073b511d28323af0c55b06ed1fa7a7e515d1b2620a4f85a103fd23720975f80d6f10c93c2e7cd0332b08abd86a80de41af6d72b74d1c7270ba892c9f918892fd3a7bf17b0bd5741c9b9ad98fbc161f1323231bb84841b5b28255bf73e1e0351d262694fb2738cc8aa3669d418748d1724cc88321993aaa61b3538479f7ceb9d0278d067c16375be7db220add9a961d212cd6f3d60ea2033c1321928734582d2731b6aedd96d0717ce99e295c889076440740d7483b97319bb856551a979c7421942a0f01521ad40a4e71eaaf37d248159dc89d948b7a13289cad7da7d2d9e4429b7dbe15ffb4642997ffc5f68e6f3f039af0b9cbe65fd3744786c5674616d83ded782284e174b2162ae0b174bac24071e65710ddfe98f18f0b23a278c3dbb9a4c0aec2b2e946f9c0c29a89c56fd0331ceea0ed19338ac651a0ac33ecfb75ee2e6f7ce8d06ddd512bca1621871ecb46a31c628578aa994c6625ebbce843e737b21d6ddd27c6e335af6537b0c539cac4ff3e3dd3ee3f1c777c3ee21d87d6a68082e466e5518f88a9a845bb7250591df73cd16a44e0ac060dc3a7104654a8a4e55531685c8f954d9013f65621ff9b901c68d5fcf005b538ebcb0b06e654e1cd36176234b35705cc09932f6693b66e2e574aed0c64b76346075477a025d8fdbcb5fcf6beb5c44c8a6c1cd4f3b7d86be6fb905f1d81dff9f7504e45b9a9a28ae3fee153673f3100c2424a839f2037231574dadcc20e0aa871f720f907f464ffc060881b600875cd8d56a899313a7ce93fa0a9ea90b22d39bdfccd58959a44984d52edbea67200590a8859d75dbea6ac34f15f89fe50455d7843076840edce81d16f4dde6e80adaae48911c22cd9db8febcc4d84d0cfe7764b8539ac88a9ba3b31d834100879026b0f4fa284e9ba8808b4e830f0571d336e01f86331715b04d8ec1a31b7c2e650b52023a95e819f026bc7b809784c20a5d14bff1269b6ca02dfd0ae438e6af8183e82c28f31a9486e9cb33f83e0e5564d91af2ebde7b3e08a8528fe7fd8f4887aefbf2de277827dbf6e1adde2d2e995c3664fc67f3e667bec30980d2d460dfa17af6b7339ed6f163232012806222ab07ac9315dfba0d8bab7d498360804ebc360257c7b4692e3b62c3647d5fe50b9f493efe1b6f25617d90c55cd823b26a8a5b1e19de693cd1d8c29b4d751edde787159602d7fd0e09dc405bd8572ded8ab8331ba0f8f6de719b5a891c14256a4ef4b7f469c74953464a49cb749908dfc4683b92e6f0c47d4364e188a6f4dc6d5fd22ad8d3261f04fb7d6b6fdf6e257add8278b11bf2cc27a52f979cf1e9037943d3a90e9018748951a69e3eaa27ad6775573e78907fa654a197c03cda4d0ed8062593734b5fe00714f311e141d3624e9c536e5d53b5873785a0439a77c64cfe91dd43581fd82d5f3bdd6266454700e4a2f792b11f663bdd65f65167d4d00e2293713b04f9b367f40d3c3f80069198a3ad682b547d2c58d62348f28e52be2241569a326a72cd1f3e6b7bcb3e8ec44ccbc067d401e5cfe8ae60def44f2505ee159a8889fa832ec2b4d76c0170cb2b9a4541da9711ca378037001d5e81a315f4ea0e7b62ba3b2308875dc7db468f24a5eb6ac64190c9c450dc66ee08ddc58f27a1dae74bc762a3d64dd6f7be666dd5c0c6c48fe7bb8158b384d0e5e82ebef566c56fd1e840454c6950368217a4b3f6b6ea515eae57573134a756ef5f9cfb7efffa7463dea320e41a7eef3d3b735a5d9e0f5fa65c546845882ea2cd739d2fd4d267b07f9a5e7ce9f89e5d35edc26c2ae1c91cf6d8a56a5a6e05693c041ed1d5de95b6bd54b761108cc74a06245e72b918f4d214f5132122a6828894160ab3fecf96f912314657590ac4142be1451e3aaba199ee493e5d50f487564772bcec5ce17b652cae390e5dc3cf161fa20dcff7ea4ef53c0380a1c6cd99b63a9f21835b8dccf059772a2799e18db2ab8a9805139643a6447dba81ef8c26c2c08b4fc3ef09a17ab4054fbc38f9b25a07b355b5f941923c35f555a5cbe0a816a982fbeb7ca3a84dda15ea937e66cd612131c075dcd2f18d92ed99493c2aeafb810b33c8e95105ef0943182e90847ae190bad425f44eb462aff6c5a3f5515dd3c0c5e27826caede17a7f2f7a874a73ac0e2d530b555faffa3930a6413911adcde4d2efbb6f9435acc5f568bdeee3bfac077aae468f4d53fcf525e53717652e6f0a32fe9b71811f1a759840630129bb759a7567ee163d5bfa677f84fbde90807457c6691b6b394d7eed3669068aa02064b8adb7f3fd41846307ddbd9f3a3b29c5678776edde2a8db020310d3409badad5e5ba95b31bff3b251badf456707014d6b539ed463754ecddd8bef087912df7a28dff1a1400bada194eb5fb0f94d75a815e56d86b940edc2ac62088847880b814181a5e1785b1f572d4fbd02213b566dabfa2d4d67ac6e16ce04d18bc41b378b2c6d79a586ed4cbdc20aa1cdc7f7cfb68fa7e80535da629abae7769798a333855823723b838fd8f6dd93600882e0c1b69943cec48721abf81e28975e2ba99583fe59986d67259e5844b2d4ca9f2863aaf0ba4661d4679b1b7cb9856d94196446b9a8d9d5c2980e0c566c9f085fb3fcc88e937a53cb08dfddb84b5ec7ef47cedc6522a22840d2446445782a0b36490195c68d78f9dd282f841c7bf3ece2c01753fe9c5fa3ff6c30ca2b533622fea8c436eebf07e8472b2f84d6652054d51448430b80a4827f1e8fedb17071c517c28743f153aeb66f57c1ff6b777c448d363fd7a335c26d045d304083e46d24f521236f2a349ada99552b24efa0f137a03a178126547b7e87cbe7d25daaacf08386876393e169b8962104f7fe1705645d621c7031c40247994ffd25f91041d355a3259d1d88e22905be13b6983c3d98eeefb7d4c9b54b2c91b6398426f7bc2b21d9584e94b195270278838fed7634bed2e6d77db59dfca6a6c0aec61be914c4c3aaf7a15217cf5b41707726b44963477c06eebdaa64c330a8c6078270c2b072580923ad29931d5922832c11c39c0409f97143c10c7172e1edb267fed67ace656335a608f72e8516bb115ed723af5a67359a601ede453de94c1dead6fbcfb5dd3dde1b8ec072125a3514f57dc11701d96f19c8d2cecdd3ee8a889ef17c465170e740d2954f1aa39f4fad39324493b7aec0a2ce82cbd38fcc9a8c087cdfcee5593fa28782d4c529def4d698c55e4db226026201b0438582a9c443c299e35dc7ffb2d20b32559f4bbc888612a9880198895b6125671fc2695b8524164105553e5fd3455d62cef702b2d900cc0889f8828046596585bb0d561c144f36469a8f44fcb5a29d66259ea23280085a68ad9280ac67f62f50c4c45353ea1a6754ba1451e6283ebc870079284a5254bf26aa0821db1bed8d2106c201857ec1dc71c39866a3325d1c347b53d3464989cee4b85be7627ec87b60b1d00348aeca1db443c3b7b91a3262efb1599909f12cfba2225a96a5240cba81b0639a522d7a783bf5eb23372271af8f6046c6b016ba0cba6d70333330ff93d131aebea30b807765867bb6b65685d8bd42d2bcd7f7c911dee2ff23bb6e88e593037947a9fc83c34a36cf12c9e88aa6f204f23bf20186432d115fa25435f1a9ae68170c4f1ab8c7958ef5268eaa7fd04f9bb99d02b0b04806e2f78ddf99eac683b74a758a7dc0d32ab336e90606cebdf96624c6ec3d1946345d9ff4a15ed212ce2a28e53c827e2e5478ef65d6508d934dd8a7ee5811fed0ff91f8ac3fd5e012863d4ca5ba008cd8e61d663342b5733b21d39cea04fd0150cae7f857398909dbd1d278f97907f74feacecc20aa0d756ace78802c45b925f1d2fea70b34c009ef0d53758942d0f9ae6b65d2cceeaf48bae415cebcbdd65a8b3cd7f9f51da96632bc01d227b3637eb8e2353bd59769d7088bffb7c47ab469579a14e1e2eb50b7a3b7027fbb09f5e1a00cad98dc61998916a60515d47dbdf201846237a882e3b15c74bfd7e0c67a9f78c07462cf89950787f8c90cb65cfd53eb0b2946a3e63078019b232b85378fb82d27d5c750cc81216c9b49e0286a6016853177655cec69087f017ee9ce8a30ffb22992259fa7736a04676e76e46dc29428b7561178c03775f4b30f4102747d2840d555cf5780853342e17d40fe7ebacc9462dea0e67a9b1af8f62e29b8fe533347ea592cf40cdb2770006f75ab7a82615ffc7c4e7988a13cc52e92cbd4175f207aabe74f8d34727d90f0867bbfdb968f1f597386aee7db3c6ac1a616533a7eb3cc4fd53e9c277ac59aae0fd419703c3263703e1d9e5360e437b95c03007344d11e9b5dcc9a", &(0x7f0000001400)=""/4096}, 0x18) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2254.791453][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 05:06:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=&(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:43 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:06:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x17b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000700)="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", 0x1000, 0x0) r2 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2254.990371][ T4070] overlayfs: filesystem on './file0' not supported as upperdir [ 2255.134353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2255.140185][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:06:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x211, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2256.814268][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 2256.820431][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2258.894394][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 2258.900520][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2260.814335][ C1] net_ratelimit: 20 callbacks suppressed [ 2260.820026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.825802][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.831591][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.837355][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.843148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.848910][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.894348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2260.900098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2260.974387][T30621] Bluetooth: hci0: command 0x1009 tx timeout [ 2261.374321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2261.380189][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:06:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x93c) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:54 executing program 2: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x4) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:06:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x17c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:06:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:06:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x212, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:06:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) fallocate(r0, 0x30, 0xffffffffffffffff, 0x80000000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}}, ["", ""]}, 0x30}}, 0x20000840) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0x8, {0x7, 0x7fff, 0x3, 0x5, 0x8, 0x5}}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:54 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570706548b100f06bff2f66ea5965306c6c6f7765726469f23d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2265.498531][ T3624] Bluetooth: hci0: sending frame failed (-49) 05:06:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:06:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:06:54 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7570708f726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0099"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x400000, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x6, 0x7}, {0x7141ed77, 0x100}]}, 0x14, 0x2) link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='./file1\x00') unlink(&(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000340)) [ 2265.577784][ T4131] overlayfs: unrecognized mount option "uppeH±" or missing value [ 2265.601504][ T4134] overlayfs: unrecognized mount option "uppeH±" or missing value 05:06:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x4, 0x1) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000240)=0xffffffffffffff80, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) 05:06:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2265.692795][ T4146] overlayfs: unrecognized mount option "upprdir=./file0" or missing value [ 2265.715282][ T4150] overlayfs: unrecognized mount option "upprdir=./file0" or missing value 05:06:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x17d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2267.054295][ C1] net_ratelimit: 20 callbacks suppressed [ 2267.054304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2267.065915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2267.071689][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2267.077472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2267.083231][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2267.089033][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2267.134331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2267.140085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2267.534254][ T8548] Bluetooth: hci0: command 0x1003 tx timeout [ 2267.540378][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2267.624288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2267.630085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2269.614309][ T8548] Bluetooth: hci0: command 0x1001 tx timeout [ 2269.620447][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2271.694381][ T4100] Bluetooth: hci0: command 0x1009 tx timeout [ 2273.294325][ C1] net_ratelimit: 20 callbacks suppressed [ 2273.294333][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2273.305790][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2273.311696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2273.317537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2273.323298][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2273.329111][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2273.374346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2273.380287][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2273.854301][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2273.860143][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:07:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:07:04 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x96, 0x2, 0x3f, 0x9, 0x100000001}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0xf5, @loopback, 0x6}}, 0x8001, 0x6}, &(0x7f0000000240)=0x90) write$cgroup_type(r0, &(0x7f0000000380)='threaded\x00', 0x9) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x213, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:07:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x17e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:07:04 executing program 3: syz_read_part_table(0x4, 0xaaaaaaaaaaaab31, &(0x7f0000000200)=[{&(0x7f0000000180)="3c61c82ea40d5fb05516b7f3bfd733437a6c4edf0bdefd35c62302aa36115a534a5b7d1bedf673ca1b009cb19fe9756141106f176c93cd6f8791cb9467ee9a3d5db4952498419f8759db56db35ae7ab3b4963bfaa0e01b7b81ab50de0149066b263197691f2e62e6d3ea2d1bff07f06df527805c0e4dbe238cb71570", 0x7c}]) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x101) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000140)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x3, 0x1, 0x0, &(0x7f0000000400)=""/97, 0x0, 0x10000000008000}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:04 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001700)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./bus\x00', 0x400, 0x5, &(0x7f0000001680)=[{&(0x7f00000002c0)="6c52ee03e91daf3012d7e600da545e2a93c4be6eadf4b40ff5c85a9249e97f47f5cac3faca2af441bde35464110dc373c121680cea63a25c3f0ae899dfd8f5a10d550575dbfa1414965767810e3baaf08cfcd154dca621657f540d8c67158f6d8583b9d6df3b38524da15607e1d284d082c8889980b6e769e98ff9457b0e9fa8da14e18b6cd09d73d896fd4774897674e9c53dcf70431b0d29b3e9de37e900dbf128d247438d8d1ddeccd45f17a954761dd9a9a8abc0599fe4104a10dc71df46354bcf6d99ed66e9ff5865d1d54cd720e9e363", 0xd3, 0xffffffffffff7fff}, {&(0x7f0000000400)="edea067d44e618496174ffa538904040e2cb01ddc86e6449be5a4738b5dabd6a27f7b2370b831c31f94ad0dad18512c9be6fe674036215fb6ddb0497c647fb9164794c4df57fbff8dd3a2b1ff04b4d4b25b990bb238f4d2e44fe", 0x5a, 0x9}, {&(0x7f0000000480)="0be9fdead814898a86e264049a5447238c1a673c77d2588aeb7e604d519374d8b8e97d8344691c839469be93b329817e0ba707ed284423ad8e1740443c7f5d92ff7d8138a1737aa580fd9e732ccfc69ff4b5d8fa20851ffb34b1f9dc643a73aa49dee35e02fd763aa8772486f0476f513a3caa6edc1a73bab3be737538fb6865cabc02390ae607736c226a97c08598252b787cd96812d69a486cf6c051306bb3a57d0445cdf847b9d34ef1a874c7deb82b4789ef49d77dec7aa525f47b20237acd413a47568f6a89be32d8ec8e4b296c8b24e646d8d585", 0xd7, 0x7}, {&(0x7f0000000580)="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", 0x1000, 0x7}, {&(0x7f0000001580)="d5aa29db224e115d815b1fa4e35a5c83c40bff9a1d09675259e51ecfe18f402a1eb46bcd8cb241cc58f161a8df73de8315dc8e3930ed7bb61b9af60f81257ae57bf32d03696cef2ce84c5931b8e068dbdc5bd8fedaf5c0d29085b02c0efa62fc1a55282908c7ef4f2283514645b6244df95220cf876bc205d696e1452bc33b5a99a538f49fa59849cbc7ad6c69aaaa1cb9c1ba0330a71ffbf432ac8c41b496a9c48385169085e9c54caef282c903cae0543939f3d4c3c7e89894d2406a4ebc27fb97741790a691ef", 0xc8, 0x2}], 0x82842, &(0x7f0000001800)={[{@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'ppp0'}}, {@euid_eq={'euid', 0x3d, r1}}, {@measure='measure'}, {@dont_appraise='dont_appraise'}, {@subj_user={'subj_user', 0x3d, 'posix_acl_access'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@subj_role={'subj_role', 0x3d, 'nodev/^securitymd5sumvboxnet1mime_type,$posix_acl_access'}}]}) link(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file2\x00') fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2275.709517][ T4190] overlayfs: filesystem on './file0' not supported as upperdir 05:07:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:04 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uppwrdir=./file0,lowerdir=./file0,workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2275.875234][ T4206] overlayfs: filesystem on './file0' not supported as upperdir [ 2275.975038][ T4214] overlayfs: unrecognized mount option "uppwrdir=./file0" or missing value [ 2275.989046][ T4215] overlayfs: unrecognized mount option "uppwrdir=./file0" or missing value [ 2277.774395][ T4100] Bluetooth: hci0: command 0x1003 tx timeout [ 2277.780548][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2279.534324][ C1] net_ratelimit: 20 callbacks suppressed [ 2279.534332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.545792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.551569][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.557366][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.563121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.568898][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.614293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2279.620118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2279.864378][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 2279.870448][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2280.094301][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.100078][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2281.934393][ T4100] Bluetooth: hci0: command 0x1009 tx timeout [ 2285.774342][ C1] net_ratelimit: 20 callbacks suppressed [ 2285.780032][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.785843][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2285.791640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.797422][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2285.803212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.808964][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:07:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:07:14 executing program 3: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)=0x6e, 0x1e7ae8b6e16cf92) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:14 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x40) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x80000000, 0x7, 0xfffffffffffffffa}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x2, 0x2}, &(0x7f00000001c0)=0x90) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x17f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:07:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x214, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) [ 2285.854323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2285.860108][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:07:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:14 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'ip6gre0\x00', 0xfffffffffffff42a}) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2285.957871][ T4240] overlayfs: filesystem on './file0' not supported as upperdir [ 2285.996743][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 05:07:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:15 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x9, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2286.117923][ T4256] overlayfs: failed to resolve './file1': -2 [ 2286.132420][ T4264] overlayfs: failed to resolve './file1': -2 [ 2286.334275][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.340155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2288.024339][T31237] Bluetooth: hci0: command 0x1003 tx timeout [ 2288.030487][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2290.104356][T31237] Bluetooth: hci0: command 0x1001 tx timeout [ 2290.110615][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2292.014364][ C1] net_ratelimit: 20 callbacks suppressed [ 2292.020058][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.025836][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.031600][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.037313][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.043202][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.048971][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.094258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.100046][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.174295][ T3681] Bluetooth: hci0: command 0x1009 tx timeout [ 2292.574288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.580187][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:07:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x100000004000, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000380)=""/156) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@int=0x9, 0x4) 05:07:25 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:07:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x215, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:07:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x180, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:07:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:25 executing program 2: r0 = open(&(0x7f0000000040)='./file2\x00', 0x333000, 0x1d0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000002c0)=""/224) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x23, 0x4, 0x6, "0ed11a5c128a615e80b7f17b8e82afc2", "37ca2fa8de7e64fced61d19e6d69"}, 0x23, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2296.148107][ T4289] overlayfs: filesystem on './file0' not supported as upperdir 05:07:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0, 0x10000}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x80, 0x450000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={r2, 0x6, 0x0, 0x507b1ad4, 0x9, 0x9, 0x3}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:25 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xa) fchdir(r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x1753, 0x4) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2296.266454][ T4312] overlayfs: filesystem on './file0' not supported as upperdir [ 2296.335575][ T4335] overlayfs: filesystem on './file0' not supported as upperdir [ 2298.174299][T31237] Bluetooth: hci0: command 0x1003 tx timeout [ 2298.180466][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2298.254275][ C1] net_ratelimit: 20 callbacks suppressed [ 2298.254281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2298.265683][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2298.271422][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2298.277175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2298.282935][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2298.288678][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2298.334284][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2298.340049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2298.814267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2298.820187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2300.254389][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 2300.260662][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2302.334281][T31237] Bluetooth: hci0: command 0x1009 tx timeout [ 2304.494345][ C1] net_ratelimit: 20 callbacks suppressed [ 2304.500040][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.505790][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.511550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.517281][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.523164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.528906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2304.574289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2304.580071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2305.054328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2305.060241][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:07:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:07:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) getsockname$ax25(r0, &(0x7f0000000140)={{0x3, @default}, [@null, @default, @rose, @netrom, @netrom, @bcast, @default, @null]}, &(0x7f00000001c0)=0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:35 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_getlink={0x48, 0x12, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x200, 0x10480}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xfffffffffffffff7}, @IFLA_ADDRESS={0xc, 0x1, @random="86155014fa74"}, @IFLA_BROADCAST={0xc, 0x2, @remote}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x216, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:07:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x181, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:07:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84800) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000140)=0x2) 05:07:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:35 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0xfffffffffffffbfb) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x182, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2306.400459][ T4362] overlayfs: filesystem on './file0' not supported as upperdir 05:07:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2306.531864][ T4386] overlayfs: filesystem on './file0' not supported as upperdir [ 2308.424293][ T8548] Bluetooth: hci0: command 0x1003 tx timeout [ 2308.430557][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2310.494334][T31237] Bluetooth: hci0: command 0x1001 tx timeout [ 2310.500474][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2310.734302][ C1] net_ratelimit: 20 callbacks suppressed [ 2310.734308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.745943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.751709][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.757489][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.763233][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.769030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2310.814295][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2310.820196][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2311.294282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2311.300160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2312.574336][ T8548] Bluetooth: hci0: command 0x1009 tx timeout 05:07:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:07:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x22000, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYPTR64], @ANYRESOCT=r0, @ANYBLOB="b0"], @ANYRESOCT=r0, @ANYBLOB="dda6067aa7f90b5b3352e95894444720c1dea3284ad1aa76c8a4b8f02b5383e3e7861c2b7248aef5f373a6f6488c4a972f40c4d4cbbc8aeae364a5705d4cfb2b4391cf4b572be895", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESOCT=r0]]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:45 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) connect$x25(r0, &(0x7f0000000380)={0x9, @null=' \x00'}, 0x12) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="69723d2e2f66696c65302c6c6f77655f9f30c52406ae4b696c65302c776f72096469723d2e2f66696c65315c00000000000000"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f0000000180)=[{&(0x7f00000002c0)="1a62ce89eec048ca5f362af83ef653f46cc06af7964a35feb7df784466c9a5ac4efb270d3a69f19244a3ebe5472cfa004642bdaa0be9ec2189a96a75d1e6ca09336b687c57b95cdd67a04263f3e1c19754caa39ef8bc9de3d7890fdc371a66a7293d3fb631476d036974ec24311e8685caa77c0413551e2961598634c6a6cf60a50bd6b8827ff4792415b347a6576f509812cfb57cdebab9f41d46f2da20e92e32e303c7ea20d954c5469a10d54d", 0xae, 0x5b0f}, {&(0x7f0000000400)="c9bd68c2a63d3f5aab96131bc554a476f0aee49ca5f1dd0c9f72f59098226ba7c02b4c4f7b6e3a2a8952a8cb55a58f75ef90fa8f564bda50d225f9b713c334777d4e33612d603b0607e51e41db5138ef7fb12ff67d44121e21fdc713f3288dcbcd4d7d561ee6e7ce59b3ad45a7310f180ce361306f3df65034b8cc4bd270a3f9cb53ec07430ae5e12b944a524d430e890e3ae94cc00f75b95bc73f4a9c9b19ea76715dc0066b23f5d582951a873e4ca69a9747a666c244268d392c1802e5da6ce7053b877cc300095522730f0eec2a35", 0xd0, 0x2}, {&(0x7f0000000500)="33574d246f09adf1595a3a849e0ca964781b9ceb8262953e0b2630d4be43d461844f7c08f5a24e18a970400b5ead29b79534704b804496690db15d4fb60a62db7285830a59c512c6e187d597b9213d3f9cf5d0b7365faf860aed02784d67bbd8ec2f88d1f60d3c4aab9994e267c33f716a1a27828f04b814f98807baf8e742b050017cc76d976c464a58c877b47c7d8e9babe1597ca12937f0c730977d413f8b10520b2b75a9489dd2f7ae963d9f42b412d56eafaa7b3d3b1d49eb97c06aa9378de90b7d4c111e43c2e2ea238e806e2ad787e4b5009367fb4f146fb05413fad8e360cc19df5086f62c1edefe104c1211", 0xf0, 0x3979}], 0x4488, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x217, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:07:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x183, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:07:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2316.610278][ T4404] overlayfs: unrecognized mount option "ir=./file0" or missing value [ 2316.641935][ T4412] overlayfs: unrecognized mount option "ir=./file0" or missing value 05:07:45 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75000800006469723d2e2f66696c90f31d4929a7e59d6469723d2e2f66696c65303c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 05:07:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xb) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000180)={0x15, 0x4, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x108) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x78, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x55}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x718}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x95da}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2316.730457][ T4432] overlayfs: unrecognized mount option "u" or missing value [ 2316.747023][ T4438] overlayfs: unrecognized mount option "u" or missing value [ 2316.974284][ C1] net_ratelimit: 20 callbacks suppressed [ 2316.974290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2316.985743][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2316.991514][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2316.997292][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.003049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.008838][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.054263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.060099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.534292][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.540143][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2318.734254][T31237] Bluetooth: hci0: command 0x1003 tx timeout [ 2318.740542][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2320.814308][ T8548] Bluetooth: hci0: command 0x1001 tx timeout [ 2320.820708][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2322.894364][T31237] Bluetooth: hci0: command 0x1009 tx timeout [ 2323.214312][ C1] net_ratelimit: 20 callbacks suppressed [ 2323.214317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.225785][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.231848][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.237929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.243825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.249692][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.294355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.300233][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.774330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.780350][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:07:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:07:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:55 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x800000000000) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:07:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) 05:07:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x184, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:07:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x218, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:07:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) membarrier(0x8, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x105200) sendto$isdn(r1, &(0x7f0000000140)={0x40, 0x4, "b28c93dc32530969b404e95e32bdd4d890e349d831a194bdd6840181d05ea5f330e0cfecb2aee50cd9897819dd9855ce64be07423bbfecd466734c7905dd75abcf6e9c5f9c6d667913d00a65949f418d52f37526be50c72c66fde96bb153a16cc1"}, 0x69, 0x4000000, &(0x7f00000001c0)={0x22, 0xe99, 0xb16000000, 0xffffffffffff0001, 0x9}, 0x6) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000200)={'bcsh0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:55 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./bus\x00') 05:07:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2326.856453][ T4467] overlayfs: filesystem on './file0' not supported as upperdir 05:07:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:07:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:07:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x42000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xe3, 0x80102) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2326.973424][ T4492] overlayfs: './file0' not a directory [ 2326.980580][ T26] audit: type=1804 audit(1551589675.912:478): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir291748992/syzkaller.Cqx5PT/3465/file0/file0" dev="overlay" ino=354356 res=1 [ 2328.894284][ T4100] Bluetooth: hci0: command 0x1003 tx timeout [ 2328.900413][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2329.454281][ C1] net_ratelimit: 20 callbacks suppressed [ 2329.454287][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.465690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.471443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.477290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.483048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.488824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2329.534293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2329.540106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2330.014290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2330.020094][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2330.974329][ T8548] Bluetooth: hci0: command 0x1001 tx timeout [ 2330.980481][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2333.054378][ T8548] Bluetooth: hci0: command 0x1009 tx timeout [ 2335.694274][ C1] net_ratelimit: 20 callbacks suppressed [ 2335.694280][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.705946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.711687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.717448][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.723283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.729060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.774353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2335.780151][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2336.254267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2336.260128][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:08:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:06 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f00000001c0)='./file1\x00') mknod$loop(&(0x7f0000000040)='./file1\x00', 0x81, 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='team_slave_0\x00') r1 = shmget(0x1, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 05:08:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x219, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x185, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180)=0x200000, 0xffffffde) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2337.089251][ T4513] overlayfs: unrecognized mount option "uuperdsì=./File0" or missing value 05:08:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x186, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)='\x00'}, 0x30) process_vm_readv(r1, &(0x7f0000000540)=[{&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/5, 0x5}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f00000004c0)=""/114, 0x72}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f0000000800)=""/13, 0xd}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000a40)=""/29, 0x1d}, {&(0x7f0000000a80)=""/146, 0x92}], 0x6, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=&(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000180)=""/115, &(0x7f0000000000)=""/43, &(0x7f0000000300)=""/246, 0x5000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) 05:08:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:06 executing program 2: mkdir(&(0x7f0000000240)='./file2\x00', 0x1) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x2) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) socket$unix(0x1, 0x1, 0x0) unlink(&(0x7f0000000000)='./file0\x00') [ 2337.141631][T21880] Bluetooth: hci0: Frame reassembly failed (-84) [ 2337.160397][ T4531] overlayfs: unrecognized mount option "uuperdsì=./File0" or missing value [ 2339.214255][T31237] Bluetooth: hci0: command 0x1003 tx timeout [ 2339.220388][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2341.294379][T31237] Bluetooth: hci0: command 0x1001 tx timeout [ 2341.300832][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2341.934340][ C1] net_ratelimit: 20 callbacks suppressed [ 2341.940127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2341.945956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2341.951737][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2341.957467][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2341.963209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2341.968923][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2342.014288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2342.020163][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2342.494308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2342.500365][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2343.374338][ T8548] Bluetooth: hci0: command 0x1009 tx timeout 05:08:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:16 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000040)='./file1\x00', 0x0, 0x10}, 0x10) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') getgroups(0x3, &(0x7f0000000240)=[0xee01, 0xee01, 0xffffffffffffffff]) stat(&(0x7f00000015c0)='./bus\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000001880)=0x5, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/self/attr/current\x00', 0x2, 0x0) lstat(&(0x7f0000001680)='./file1\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file1\x00', 0x6, 0x5, &(0x7f0000001540)=[{&(0x7f00000002c0)="7acda90f17ace42026ba58fb87f80c0f9f8e3df79a3196fab84f7e2365a85231c67c0aa1ce91087ace0421a118f9213e9967d66148bdf5c710cf33af67bf3f15261c98786052ae278c01b271c190be6253c06f6116bfe91277a208f80102da1e5cdce2f2bd400cf2", 0x68, 0xed}, {&(0x7f0000000400)="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", 0x1000, 0x1}, {&(0x7f0000001400)="958d0354e18fa075e0515f3c6bc8f1dcc4d0a97398368ee63a1e4286a38ed11337c1076efb049cd5af3a08e000128bda95709e2958723f8fa2934657d2fd5dac9fedc624eff31fdbe4c9099377d996261e134cfb98926c238e7406600a30b89f1c80ef29dd696d3afa52afbb02d1fd2f782794540781197108ecd0449a0506d58b90d518be84aea95cf6336c463968f1acaa539873709556f0f7bc2b6292764a71f8ed578b601ec79f9bb66406ad68937fab922443f81b65afc1734e58b2", 0xbe, 0x7}, {&(0x7f0000000340)="757e7777f66df78de5a4090fbecaf3fcdfb069780246b45d2c76cd0b68a8f8d8bdc386c414c9b77e0e8443a7c1a206eeda2959a1e2693e399de83eb90900dcc9cbd843f06e2e10d03c8acb66", 0x4c, 0x3}, {&(0x7f00000014c0)="b7073168a1752be2e14526951411c74d41d783419550ca2923044e9cce6d4e96105e02f045f909ede3a1f81102da247692a5ca09876c34c1cb8ab7c8fe7254cdeb", 0x41, 0x6}], 0x8800c0, &(0x7f0000001740)={[{@fat=@gid={'gid', 0x3d, r1}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@dots='dots'}, {@fat=@errors_remount='errors=remount-ro'}, {@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@umask={'umask', 0x3d, 0x32b9a1b3}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '@\'-'}}, {@dont_measure='dont_measure'}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>', r2}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@appraise='appraise'}]}) unlink(&(0x7f0000000000)='./file0\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xa) 05:08:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x21a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x187, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x80, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000400)={'erspan0\x00', {0x2, 0x4e21, @loopback}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0, 0x105001}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x24) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f00000001c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000180)={0xd02, 0x47314356, 0x1, @discrete={0x8000, 0x25}}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) 05:08:16 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') r1 = geteuid() mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x90000, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r1}}, {@timeout={'timeout', 0x3d, 0x7}}, {@rq={'rq', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x7ff}}, {@sq={'sq', 0x3d, 0x1000}}, {@timeout={'timeout', 0x3d, 0x100}}, {@common=@cachetag={'cachetag', 0x3d, 'workdir'}}, {@timeout={'timeout', 0x3d, 0x8}}, {@timeout={'timeout', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0x21}}, {@subj_type={'subj_type', 0x3d, '*posix_acl_access'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) [ 2347.359750][T21880] Bluetooth: hci0: Frame reassembly failed (-84) [ 2347.372797][ T4576] overlayfs: filesystem on './file0' not supported as upperdir 05:08:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:16 executing program 3: syz_init_net_socket$llc(0x1a, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000380)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000001c0)={0x401, 0x2, 0x80, 0x1, &(0x7f0000000140)=[{}, {}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x121000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000003c0)={0x3}) fcntl$addseals(r0, 0x409, 0x2) 05:08:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2347.509200][ T4599] overlayfs: filesystem on './file0' not supported as upperdir [ 2348.184259][ C1] net_ratelimit: 20 callbacks suppressed [ 2348.184265][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.195826][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.201580][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.207326][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.213089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.218821][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.264263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.270049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.734269][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.740135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2349.384257][ T8548] Bluetooth: hci0: command 0x1003 tx timeout [ 2349.390504][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2351.454317][ T8548] Bluetooth: hci0: command 0x1001 tx timeout [ 2351.460640][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2353.534324][T31237] Bluetooth: hci0: command 0x1009 tx timeout [ 2354.424326][ C1] net_ratelimit: 20 callbacks suppressed [ 2354.424348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.435762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.441521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.447322][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.453121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.458911][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.494331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.500262][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.974383][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.980216][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:08:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:26 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d0e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = gettid() fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000240)={0x9, 0x300000, r2, 0x0, r3, 0x0, 0x9, 0x9}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r2}) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000140)='./file0\x00') 05:08:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x188, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x21b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7d3d, 0x800) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0xc05], 0x1, 0x6, 0x7fffffff, 0x6, 0xfffffffffffffff9, 0x3, {0xfffffffffffffe92, 0x8, 0x3, 0x6, 0x101, 0x1, 0x4, 0xffffffff, 0x7, 0x1491afb6, 0xfffffffffffffff9, 0x6, 0x6, 0x8, "26e5e58a1fcdcdd7764370dd069fbf22e402291afea3830433050d44c407c8c9"}}) 05:08:26 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2357.598034][ T4615] overlayfs: failed to resolve '/file1': -2 [ 2357.611469][T21880] Bluetooth: hci0: Frame reassembly failed (-84) [ 2357.626253][ T4626] overlayfs: failed to resolve '/file1': -2 05:08:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)=&(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000140)={0x0, 0x6, 0x3015}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:26 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0xffff, 0x3, 0x8, 0xfffffffffffffff8, 0x81, 0x2, 0x4}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/105, 0x69) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 2357.675524][ T4640] overlayfs: missing 'lowerdir' [ 2357.694071][ T4644] overlayfs: missing 'lowerdir' 05:08:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @loopback, 0x8}, {0xa, 0x4e23, 0x51, @loopback, 0x200}, r2, 0x45}}, 0x48) [ 2357.760079][ T4662] overlayfs: filesystem on './file0' not supported as upperdir [ 2359.614340][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 2359.620620][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2360.654321][ C1] net_ratelimit: 20 callbacks suppressed [ 2360.654327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.665827][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.671585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.677370][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.683185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.689092][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2360.734303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2360.740090][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2361.214410][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2361.220450][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2361.694376][T31237] Bluetooth: hci0: command 0x1001 tx timeout [ 2361.700566][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2363.774318][ T3681] Bluetooth: hci0: command 0x1009 tx timeout [ 2366.894372][ C1] net_ratelimit: 20 callbacks suppressed [ 2366.900263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.906252][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.912042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.917888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.923752][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.929484][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.974303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2366.980099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2367.464407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2367.470271][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:08:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:36 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x50) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./file1\x00', &(0x7f00000000c0)='overlay\x00', 0x4, &(0x7f0000000040)=ANY=[@ANYRES32]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x34) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') faccessat(r1, &(0x7f0000000100)='./bus\x00', 0x20, 0x1100) unlink(&(0x7f0000000000)='./file0\x00') 05:08:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000140)={0xa97, 0x9fb, 0x4, 0x7fff, 0x10, 0x4}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f0000000300)={&(0x7f0000000380)=""/106, 0x6a, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r1, 0x10, &(0x7f0000000440)={&(0x7f00000001c0)=""/146, 0x92, r2}}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) write$apparmor_current(r1, &(0x7f0000000180)=@profile={'permprofile ', '/dev/vhost-vsock\x00'}, 0x1d) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x21c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x189, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2367.802493][ T4676] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value [ 2367.833997][ T4690] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value 05:08:36 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2367.857212][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 2367.884644][ T4697] QAT: Invalid ioctl [ 2367.901672][ T4703] QAT: Invalid ioctl 05:08:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:36 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0xff, 0x3, 0x800, 0x2, 0x2}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={r1, 0x7}, &(0x7f00000004c0)=0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x2001, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)=ANY=[]) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3}) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x1) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000140)=0xffffffff, 0xffffffffffffff7d) [ 2367.911516][ T4704] overlayfs: filesystem on './file0' not supported as upperdir [ 2369.934285][T31237] Bluetooth: hci0: command 0x1003 tx timeout [ 2369.940574][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2372.014350][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 2372.020615][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2373.134311][ C1] net_ratelimit: 20 callbacks suppressed [ 2373.140216][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2373.146200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2373.151959][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2373.157710][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2373.163526][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2373.169290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2373.214340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2373.220143][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2373.694331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2373.700585][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2374.094746][T31237] Bluetooth: hci0: command 0x1009 tx timeout 05:08:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:46 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 05:08:46 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0}, &(0x7f0000000b00)=0xc) syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x9, &(0x7f0000000940)=[{&(0x7f0000000240)="2d588e81eae5293af1a7432a8431d861b8cd449b40b824e8bcb5da70edab2e6a95f2229b58c18163f59215a2e89ec457a6aef339f3baa7baa8e4e7", 0x3b, 0x7ff}, {&(0x7f0000000400)="6739dbbf17414e50b281d47c64522e470baf6d03684234d9dfb931d8499482acd29d957411d85b6e5a8d4484d4ce1dbc1c71a2ef1acafcd6714be6ef0eb89db480d84b355caf5e7877af3a7e2b2145c016b9cec44be7cca6b5c4c5c8fdb944a5b68b8d70de4db462a5ee6ded445f13f5ca47799a69507bf3a86e6e064caae647c0d5c53c68edc02ea101b387ad646168d465414267e45b931b54fe7fe8173ec6f9249c1dedb8fbb0aa9508ce159506ccc1f345f5d3c1d98e6bf08d02488f6d23934baf48fb2c3b99d34764b70cd5f169d766b518a8d0cc680dfafcc25995e352509284679e16a700b7fa2bc0", 0xec, 0xffffffff}, {&(0x7f0000000500)="a5011c5cbdd0d9fbb4893384f05796e4b21d523ac617af07a1b85068c99b2807835504dae9cada495b9f1c19840b3ba575c45887d6f492d07560a098d050ee45c57780e60d986c04ad34dd3d02286c84", 0x50, 0x80000001}, {&(0x7f0000000580)="0f5e0f222fb28a69e5090b01ec824fe944f835259e64eb58194e967fc2773a0d9ca01e422a72335a76e212fd6d7d7b9cd8490de0374839a4c6738e508e53e420471dd6e1c79e45a2a27cbf40bca1c541a4b87c803f2a9dcb886407666dbebc60e5025e39a36773601a0047e83c36f148b64239b2cc6f212471a27cbdf48e5b00155752a76f384653b9663405c6bf8a65b1e612c819877b87faa9a83b3180420c2f8ff21a957891b2bbe597d426d0a0e04ec61f11a42817a8803b72e4719b463ea998921a9c001655b03ba6ec0244089623a23691048dcf4baeda35b34a83a88df6dfd43e6cc8f07fe5b2", 0xea, 0x1}, {&(0x7f0000000680)="b8621a3346815a68601faa653f1bf7e6", 0x10, 0x3}, {&(0x7f00000006c0)="9125603a7b7aefefd67698ebe147f4d8ba978be07d51d47d3050a7a22906a62032f807c7580c0cbdba6e3eb3b73b4b8ec8d16f5681414b9859f5baafcf5212357a38bf753f9d0c82d5c8f62216234ea31b192cfabee7c20b01bb724b458b1269713d29cc2e6b7800059b8e", 0x6b, 0x1}, {&(0x7f0000000740)="eeb4d58095053e808ab24c35c09c181a10eac441394148d52c18e3d82506815b67e78c7324ebce854b540b816cd71a16fda6ba1a9880d328b38e3882308d62657a9fa23b65a7ac10ba640678e9f037ec2bffe7b92ab3613de44263972d52ef83830ba40e19fafffa09ebaaac5d9cb3bcd53276a3188bdf477259a50adf977f9dac2f7520552eb6ae42913b84eb8277c41def8460f3a42b6b18ef7ca1846ebdcceb77ea831ca7403e403313e9cb4adc958055bac7ac749a4ad4b3ddce7c6b78b9", 0xc0, 0xf8}, {&(0x7f0000000800)="8ea1fc01c30fafde08c386ef807696f7e31b54ebf0168dad04f278871be1e5ea26d5a08d33ad261a197c0dd0070436e011af30e42bb807bdeb44697914a023", 0x3f}, {&(0x7f0000000840)="bd5c31511d6e4e4b60c2fa86d98610a66a9f3ea961805f1eb7f4b6297ac883419b238852b4c8a44b068b7ea84cf43c227c6b64767a7e83316257f6ace34b8daa4eb7d594841be9e5c286d4289c5b93b3a9208e42ba400ab4e4537ba9ebe7b8238949cb2e74cbe011c32373263358455cf707b3b8af481ad26207d137bc9b7d1671d2ff1601a4f4d5bfe7ba522c6cbde9a88f8bca9e9c3dbd86b5f092f635a964b8edbcf3193f4976d044c1e3347a251248cad96254a2536e89407cce4d621d7c6e0f86df1b9224c06d73d5225769232e594347df7dd5", 0xd6, 0x800}], 0x18, &(0x7f0000000b40)={[{@umask={'umask', 0x3d, 0x70e}}, {@creator={'creator', 0x3d, "986a518b"}}, {@gid={'gid', 0x3d, r1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@type={'type', 0x3d, "dfd796f5"}}, {@part={'part', 0x3d, 0x1d0d}}, {@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffa18}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r2}}]}) ioctl$TIOCNOTTY(r0, 0x5422) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000002c0)="785ccda10d8223adf63a61f82bcb1eecfeb259d0b49e2478b20b2880d966c081e5b6c9957e12e43b03f89649db56c15ba15767550d35ab928a3d48d0be22b2740fe495270d3281efcafeb2720fe25c788c9ee4c27b282daf577f0f8e5879351815f0ce9e3b75f89aa720e4ded39d378f21f2d90839b5bc919ebbed3e93405713acdae95a63a308734a19bf3c78cdc497407fcb55736204963ea72d2333213b6cf0d82a2c51b0c9ed52030158b886e92f132388fd588c2a9a327f5bd259dcf4a9f0b2d263df29dc402d37847fb29aaba0ca02", 0xd2) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fcntl$getown(r4, 0x9) fchdir(r4) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000480)={@host}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x401, @rand_addr="a07ddabdc5e7d0a5ccc7aad96bcf502f", 0x101}, @in6={0xa, 0x4e21, 0x9, @remote, 0x8000}, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x3}, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x200}, @in6={0xa, 0x4e24, 0x41bd550a, @ipv4={[], [], @rand_addr=0x8}, 0x93}, @in={0x2, 0x4e21, @local}], 0xdc) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000300)={0x400, 0xfffffffeffffffff, 0x8, 0x1, 0x11, 0x8, 0x0, 0x20, 0x93, 0xffff, 0x0, 0x5}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xfc9e, "d0d15ec55fcc1df66018e1633f2fe85d1b5d4912b62b866fe07e8c33bf6a46dfe88190526d31609928fca6d58ba514bf33c700a6bf2e495f094dcadce24ce32d7938dc79e8ae6035e5e85e806251b2ffb6f4d70555ae5219da012448199b9bd3d20056e5118c5b1d3a9225fd767e2b6e5707c969edde2b34e077780f0399db786bfa7c0d63cc97dd8764bc67c3ac0ad16a44533bff8314b127f877e50b91e84ad8fdbab99a1ad93528a94194930358dd0dd14d244d6abd844f85ee5b7f0d02a418decde62305651050071fdd86a8b6626218f1dd3f107524977a4708523c7f64c23ec703ad6c32a7d3170b4aaf8d0015dcae8ae71af3a240577c9f5cd1526c384595b6e6831f8e1ac4de8bc876959d04e6dabf5c426b479bc8b98538f9a01d0a4940e208bb85b4ecde0c48e37041023b6ebc421584379116a6088305fc6c0ed405afbcc6864fc59158ce1f61013acd52ddc06cf2f70995e5c8a6bcf410bf04fb483a32957e6618f045f97e673593d526d890fa4be1b8aa9c9a9c89c82d1cb4724398f6f4053d2b5e34c9ee4d7a86e3c14021d1a96ccde0c77d300134cb152fe6b16b261e0fda20fefccc654055bca5757ad729bcf5e98893e3e2afe1ba629b3cc274951150dec730c9597b4373f1b132ebcf5482c6e0592cb768916e386a92c2af9cdcafbff2618c0f49b1e4f0314bed270eb1116f1e739e20fcbbddd397653ded9c9b20743f7c37dad2d3e0698adc42d63f74252ebe5f35197d3357201a51f8eff7047da1dad27c7ceae704666f91e48c4a49756eaa47f9aa7189f273514da2bd61025e345aee0ab587675e83920a0864cd46530ee8ebe6541f6f665b68f39d243b85cbbf14fff6fea909fb24f91c2059914ce8c104d5f86fd22c3ed17c73bea768e3677d4151d3994172146d41dbe73a433fb5224f9c35abfea6d09a5eb45cfa1d9aba57cc02c6b0dbb164857d14e5da89707bcc61f4fa0021147edbf0907775d1bc3b495107c22509df2560e6d1f3438bde82ef7c13a7a842687fdd4e691d2c68dcb84e5dbee09174cf541b423cfd0603d7dc33d3a38885862ebd75d87b23ebe2c84b2c48539b4761914fe12c75730e3bc0e88a32c3cbbcc92e53ee6b2ff420a425982b94ceb03d385aba00d77db411e0d5448e16fe69f7c3f23a41e5d35423534ef6e1a1521b10b6bc388073672a5147491d51d79a458754e438b0efca509e1ab3c9739d02afc5e0e7e5fbf86cda78e398c73707afc7af84e2039b410365613c99086e76f1b404b8b69c80d4b8e27ae97d689f0e57f8dc1c466e817b15e097f60ac505e8e0f403cb60a70b67b0911c661092c3ecb2cb6c6cd0c1248a795c200c1feee2e4523af37f894912b11768086f1d9df4f4eea15fafd10c411458148c3a80e4bf1bda4771968fe306c010aa3efe1148852f253b1192a99b6a4b28ee682c21e6b653d2a054eac6837a1b4ef6fb149fbe35b4db377df6434bb17d6937e8a34c11c751638c24380ca244a09e1ac47426ec7984c08618cea79324939a2d50ee909436efa20db2a8a7e26b8dd3fa62d465bd15553f7217cc9390d0e6b154c6ec68be5ccd0e75185a354dc38d31a18f1340e188d2d31b2df83807004df15bd17c6139a109832cb1978848722d2690b0aab108b2b66f9b258eab29eecd7676447d47b2c28d190c80437bca018b847aaedd4a19adf0ce34137332bb10ff04d4cda132d0a6c2e2b1747668f5ba41abd2ee6cf5e0f3b8ddc10c20be5ac6866fbed0ebd69bdf45c787e2d2c33e4e1dfc9258cbf0a2335b50864617672941bb1c0ac8d8b9681587f5d617c2f72f197f300377d9a8ed48ab4ed2c26868a2740a92c3c7b750e80f3c7701405d1ca3328371adc2c7263b8ddaf90bcf8db8eaf0adbdcb83a02c7549376551fae823c3d66191a03027cac468da782794e0651dbbe7b0bedd2a20910569f086d3a91b75bc4559bf8f87d5f2f02099cb3e47ad23b9f2825245b5ab6b755783105487b338df7d02023ca7c0ef50a0727af0a4d1ca2e468149e4ffa193a904d17f51e2c72b9d55f8c7bd8d9b998a5dd3a061647c2cbacbdc229561a7bdb6b0a09415fb592eb47cd97cb766696ad7568a923557790337bda70c0e87756457e56ce27ac2bd3e2e7e68e9a84e5476a9373ea3a4294144ba63fe93896391f58a13505452a7bf7390f14c3871d86a7c55c8536143e7841bba92dc501096c88bd29ae542524bb27b538b729b33e55544dcfdded7b0126a5eb78a98fde742abe55668216aa15e70bfaa0158fbca94e9b1a46f7376e4a4838e0eff4ffacd510e81183a7acc125b64df3809ddabd37ce95546e1a16e7d16f4cdf3267c4263db989c4453acbe044be9f1c3580d46c66ca125f035dd9bdffb1bd7cc79aa52f0cc3bf7def3ae252398873d570241e41e49bcb7e8e877e94be57297124eaabfb4254bf76799d2ecfb96b23fb9eb6c6b35d6432f908acbcd8d4d03597ba5d8abf918a00a735a833b29be9fec315d4e57b7c08f271ac681927025ecac0ca5f4ac67f0011703c343bee71ff342d03fdeac70d37c3fe5594864c78463cf7295c51adaa4a8113f3779c7d8abdd3f5c6665cabd0577bb44b05cf16310a57901c24a43870980358aa484c1a97450b87bb31df0c9d8e5df41a6ee68820988b27ac70c20d483fdff3999458a39dbd39c0e3f02c6d3763f562c660d3d357bfed9eacbcda5632364f892bde3e1cb99ba265064d33f098a1726763e5f7b4bbd35da9f812390e7f3e1eb5c5687d88402bff1395e1adb7abb91a4d1561b420588b6432408c01e0f3fdbc220d96e4b92675b2fdd6c0e394689183c1700651134a9b96c323b3db221e141b886139a20554085e2d77da71452ba07f0abe6d574e0fa88ce32b3a732565853392cec45d37437518a01046db23a02898c74d764a423634bad0eac61730e189032ef86ed5d5f20b2174b4c127d80430f8068c9c9ae1e51af14fd037273523269cea1b192d6b4214ed4f869acf292db7f2a6cc84828eaebb80b1b7947a6535acd70f291fa410f417c18a3c7ff7ef93eff52c78cfb8972bef68e2fea90125d9c0112f112a95f88e8f651645c67008ab96741f5709493f335f771b1e862bb82b56f6d8f98a801dabc7ce0dbf87cee25d0a5865bd0cd6b7c0791cef08858e72d883ca9de4c232d9e6a68ef4c02b4949af89421a4c147ec6187344e555aae7215df255d90c4be6a5c1e9b7dc44081041fc30632ee64af7a1c7018525c82d098e18eb1e6e4590bf80c6737e0d07397c67b130f3b21a4d691b8e7cf63d8abc421d885faf12547c35f3bd6a304997b189749514821bcbb537aab627a2ebd24f70b96214e82daeb04f26cbe3ee0724b5b2a34e25a8494224303fca0cd5a7aed1613e293f283edb0872f48de2d884bfa26b879d099b3ca3bf5c2c57310efae69e1da22a1503e894054d33450fd53f494b54e18d55846c24e030c6f2e61f714aea0ee0a0aeef1e67a313e0744ee7325ced92b946894b1147d002a0a626ef6a7e718507122d0df1fa15a07474fa49f0df34f2c5d6cdf690fec8959a89c4352ba1aa717b7fff027df87a313851cae85b32999b8fc2c069c9bef400a2792f83bfee8d168f800ae6389763c337cdb6251b0765d4a537232833dff9b1181c2ab5ce89191a70557d6301590ef69f81416accfe7e50babf1c112f18b59f709f542d63fd72d39798b0ace3457dba9ba314551ac64394ac69e12f969b060e5edf58d70941a7db283871b8770daf5b83b4d2ace5fe79f50166c1f675a5155aa93938c3c35ac6e34d00a02893ab79955e3788a5c3bc1e7621d3222b80753ef7325e464fa576608088182a4f9f75425b72dbe035a61c0a032ca8a345aba2ea31c29c0500aed6c742d8562d887420ebf106c877b12bda765118f7075976c1b2acdc53eddd38a9d05adc85f7ed17bb94b12429feea8af221a31d11f41e697731b97497d8d5f6d15e51c6d6c9a953444f01bc7a372d4337bd6f6399e870a3356e2b83a0ea953da095d8ad38f1b11d0602d3a7be9b2f75e9c252ca09a787af25c7c50f02d636c077e5afbebd04e51d6b0f5b615a4720716c1dc4cfc80bef933e4d1f71ad283a1d47cfd1bd87785f65274a86c4d25d55ee32ce0f8c592c33c2b466cae9f0ab0037a240978d6105d45af1eb19080379726b74d44b886182bbf448d3244b85da6478033cc7d836cb4fda40c465b3263c5d745b3913ceadb06381b3a572158fb197d4778d483c6bc0d210a415eebfb57499b041325eefd1f15a3c338d184837c762a7b9f8188b3dfafffd8c1ef5e1dc291d26740ec1e8221a640207ec5ba40a49602564f10243cbf112860c9b123dc37f1b32e47407984021dae13356ffa7d369a1abc4ccc47190a7da7ab8e5d2908dfadb7462935bbf6b3f82bfd5abad6d7bf3c6d1206b4dd2c91c15801956f026c9fb21696a1375628f16cea4017bb1d480edf71efe72ad54dabe3476f6f174ed37c24341731c6508d0bfac2f6ee85292ff881bef075d3e5509cc3d8cd1aaf64c2b6b780ea602fb46997224fd00816ba85c30ed7fee487be4490e760172037ed75fdaf52acb97e931c96651dad04f23351bfd359f1c26514c40662761310f3926f82ca7865e7c8ebf0e62468735fecf27e87937e487248f5f800a84f5b5c8eb4fc0ed8b2eb62029fbad598b752c834144282bce9396f486da0261a9d954536f37943fef8c3f782daae701acc5704e5dbe32c41de20a274c6db5d8960bdd246db81f94858c1215e5bb88ea1eac2d55c2267e6b237554cd6fe1b758474e4486cfc75c567ec8f2c3785fd6d7759cb1c2cb980fafe202c7bbda5c3c287a12e313283c0bbe212edc6de6473d4b5179e5127525c7dd0fe3d75bb9ae0a91dca2323290113e1f0e05b16a2747fc916b535496ba0922623befe455b1a85b8e9f9ffc6be2c5ef8ca2499da31843e02891a44e91751c0f99e83cea9d4570aa18cb89255713f58261eb785d1bb2ba787428ebd7fbf929d1f85449d6e5f9efc4d2bd38625f06d2916ae4acc8d2ace0e23c0eddd8da14611a35659e6b8e0860b6fd33cc4982467770859029ccaac3348a65f36d8ed678eef92c14570987b4897bc92250db5efe1322dc846f2459072e6f1004c998e57ca57f823c4f742aa113b688d7aabb13479e5f9b81a77416a591fc1b6a4f3aa03ada00cc8be3b9f5174450f95d8227d3f08f071ae2c676df442a7e1719bd69d2bb0b95ad59e5eb90ef76ef17b60a5fb7b30310a3417287230b24dd9d51a24ddf900c14f4e02e60ff3ce054021184aa54cd83f443cb960369c830cf2a22a11bbe3073a3e69ba0cc3af7f30214af98a5b38ebcee42db5b495f96262056482a7177fa038dae50e2d59b60bc76a6010a86ce4824955a070a4cc23c8361e9dfcdc9ddf753038edac2f544b6e5ff584d80d147b1743c1f50213644bfc1c708d8041b6cc75274b614ac401de7039ab1d7347cb80d610b90b262c39836b2ebb240684faa86d69c6ab10b93a3b89728e415ba9274254d830aa0e27f9e165e7d320e042e0c577fba1e2f189c0ae0b7f395e4cea299e7cf09e048cb5bd7a00e55fdbeddc08582335324fcecfdb33d09f30412e6d1d78ada902b296c0bd15c78610db3e36011ee216e4428964ff704c28d24dba6391da6ec6283bdd2f1e95f13c7c9aec34775eccd33d6468351ddb5f459393d05b443ea4c31d505781eb272354e539e84bb2ae95689ee26a2b7030da0c80d087a6d019928228ba4024cfcd36d4dd1f9659130d76a86c139fb5ffe7a9"}, &(0x7f0000000140)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0x8, 0x6, 0x0, 0x4, 0x8}, 0x98) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x21d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x18a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:47 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 05:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2378.074933][ T4731] Unknown ioctl 21538 05:08:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000700)=""/4096, &(0x7f0000000140)=""/202, &(0x7f0000000380)=""/97, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000400)=0xfffffffffffffffe) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = getpgid(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x2, 0x1, 0x6, 0x1, r1}) 05:08:47 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 05:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2378.108611][ T4748] overlayfs: filesystem on './file0' not supported as upperdir [ 2378.138404][ T4731] Unknown ioctl 21538 05:08:47 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x11) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./file2\x00', 0x194) 05:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x2040) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000380)={[], 0x5, 0x7fff, 0x3, 0x0, 0x7fff, 0x10f004, 0x1, [], 0x400}) 05:08:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 2378.271677][ T4785] overlayfs: filesystem on './file0' not supported as upperdir 05:08:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x21e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0xe7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)="544d30138636bca15c62d52eb7f31a061249579467f84ca1a573c4524ff9ccae99a072935ab1dd86b266a34587811105916b78b48cc7bbe8ad1f9ea9dca945bd60d7205f44c26d9c8628558e5c8eaa7e4b1dbd6a6274ad16869896f32522e672705410ee8be1a1f724a7a57135336d33aef360cc493d7cbe6e718cb73aa464b42291f3e1fef53fce3b093ff0bec562fdaf4ee8b4fbcf639af523bca0315da3616fb8da6ac25c08e83c77857d3176fee75c0785c8c39cf1e962deb629c6410165c5ba8925ea952ddc52bf0aaca4ce4d9f62eab040f4ea2285f132f27fb69a622d628f4afede7d3fc738086f0535c489f52fb22f1488", 0xf5, 0x2}], 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x6}}, {@file_umask={'file_umask', 0x3d, 0x4}}, {@uid={'uid', 0x3d, r1}}], [{@subj_role={'subj_role', 0x3d, 'em1(}-,#proc%vmnet1keyring\\)'}}, {@appraise='appraise'}, {@hash='hash'}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r2 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) 05:08:47 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffdae) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x18b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:47 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f6065726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00ebae67299bcabdb4d42457476e4c53c94faf8ca89281a79377350eeefc00d617020977d203f688b5be747c9338059e0942773b8a71a1ce2afc76d5a12477c5442e01f9761e3a08064cce996608f6e3e4719cabfa317f02a7004f0cfb242c63b8d6d0a9a842d6c167c776ee8c4c6e83e202eeaaa5c5dad26ec7eab4396925166824b4b91994d56cdb8526f6de463e0341085a0ce245f336439beb5f90aaaf1ec9cf4362a56f8a0fa183447d1249aa9553ee8b23f786ecffeadfe9ec02b3c3953309f3ddaa0ec66e409bcd11e18a95064a843c8374f67b8fc126575dd458aa08760c60cc3df10a2d4a9f51ead9a6768b812743fa9138619c4387be3c4be3ea374fdfc7283cd524a2cd758aaf07a05f968544a01be5cfd1e1fe031b1658cf2874e7f842551d1b2b86f2a2b3b0767ab5706b3e55060dc08186a01d43a447be1458342aa4b4f2fa8fcb"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000840)={0x3000, &(0x7f0000000800), 0x1, r0, 0x2}) creat(&(0x7f0000000200)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)={&(0x7f0000000100)='./bus\x00', 0x0, 0x10}, 0x10) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000140)='keyringppp0bdev@]}cpusetppp0em0vmnet0\x00', &(0x7f0000000180)='lowerdir', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x84)\x00', &(0x7f00000002c0)='overlay\x00', &(0x7f0000000300)='lowerdir', &(0x7f0000000340)='[\\wlan1,GPL}\x00', &(0x7f0000000380)='lowerdir'], &(0x7f0000000600)=[&(0x7f0000000440)='\x00', &(0x7f0000000480)='selfppp1}\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='workdir', &(0x7f0000000540)='workdir', &(0x7f0000000580)='vtrustedselinux)\'system\xce\x00', &(0x7f00000005c0)='overlay\x00'], 0x1800) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2378.902673][ T4807] overlayfs: filesystem on './file0' not supported as upperdir 05:08:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffff9c, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000680)='/dev/midi#\x00', 0x7, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000700)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={r1, 0xffff, 0x18}, 0xc) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000640)={0x1, &(0x7f0000000540)=[{0x3, 0x100000000, 0x10001, 0x5}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') recvfrom$ax25(r4, &(0x7f0000000140)=""/253, 0xfd, 0x40000000, &(0x7f0000000380)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000400)) 05:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2378.970215][ T7890] Bluetooth: hci0: Frame reassembly failed (-84) [ 2379.004827][ T4824] overlayfs: unrecognized mount option "lo`erdir=./file0" or missing value [ 2379.030208][ T4833] overlayfs: unrecognized mount option "lo`erdir=./file0" or missing value [ 2379.374284][ C1] net_ratelimit: 20 callbacks suppressed [ 2379.374290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.386039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.391805][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.397557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.403442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.409233][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.454243][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.460264][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:08:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x21f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x800001) r1 = msgget$private(0x0, 0x122) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3fc}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8010) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/46) 05:08:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:48 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x80000) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x18c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160, 0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:48 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65e136ecf4f6a82c776f726b647a723d1e2f6669"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) unlink(&(0x7f0000000000)='./file0\x00') [ 2379.754113][ T4852] overlayfs: filesystem on './file0' not supported as upperdir [ 2379.835612][ T4868] overlayfs: unrecognized mount option "workdzr=/fi" or missing value [ 2379.848839][ T4869] overlayfs: unrecognized mount option "workdzr=/fi" or missing value [ 2379.944322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.950304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2380.974276][ T8548] Bluetooth: hci0: command 0x1003 tx timeout [ 2380.980558][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2383.054239][T31237] Bluetooth: hci0: command 0x1001 tx timeout [ 2383.060299][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2385.134256][T31237] Bluetooth: hci0: command 0x1009 tx timeout [ 2385.614343][ C1] net_ratelimit: 20 callbacks suppressed [ 2385.620234][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.626064][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.631859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.637616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.643547][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.649303][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.704340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.710152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2386.174368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2386.180168][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:08:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x18d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x2}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x80) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x48463143, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0xa845, 0x1, 0x4}, 0x10) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="77707065724469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c000453eca4666d8364da5dc1c713385c41f5000000000000000000000000000000"]) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x220, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x4}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x62400, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000240)={0xffff, 0x7, 0xbb, 0x1001, 0x4, 0x1f, 0x8}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ftruncate(r0, 0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000028c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="adfe10d0f1e9e9bad31f1a526b22653d85651626ab2e63c60cb3fd746e124cb66696da3cfd9b2c6559be2b4ae7d074442672096d27bb3ed155174bf9d0a997f36013757cf0066666d8b8e8306b049e25a20b501ef4da607c04718091ec09fb1c90809db6d22d98b40d35187656b1aaa93e9fa28a96dc32c156306fc4352cbd62c54debb29d6850c3746a008dcead143781e0b5f54059e9352b8697e59a618a", @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="5f80b4f4022618be4ab377c3eef51db1cda6489a7035505359b6380297d6a10558c7af4191e5249647100b693168884c97672cfa371e5a379673d72950c96e286dc93620c85703ad3d8ad9b9074d49fd6bca34c348f9ea36d10e62208bdb7a0d2a92b24f1af16e4645530500cc9f9f0ea79cb5d635969da9bb7c94191cdcb46ed352155a9c923992c2aee957fec4352d5c43ebd0da8680d11cac195c4d7c613994639502a3d17d44915ee8b5c094c36f624535", @ANYRES16=r0, @ANYPTR, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="5e6f56ee03cbffbab9c08e0240e823aba84bb1cb32f0f4e7888e64486cabf2142e97cf9b49876d307de0367f098460a82696df9d9def644305cd0d9e5b1983dd99e340cbd8c5201b23c00ed6d244d4", @ANYRESDEC=r1], @ANYRESOCT=r0, @ANYRESHEX=r1], @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r1]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f02002df80900"], &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x5}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x18e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xa}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2389.637527][ T4875] overlayfs: unrecognized mount option "wpperDir=./file0" or missing value 05:08:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x11}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:58 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) listxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000002c0)=""/171, 0xab) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0xc0) creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="0309c1da98dd21b24a9c24cc467a83af", 0x10) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xc0}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2389.825887][ T4935] overlayfs: filesystem on './file0' not supported as upperdir 05:08:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x221, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:08:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x4000000001, 0x0, &(0x7f0000000140)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:59 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x80) recvfrom$netrom(r0, &(0x7f0000000140)=""/190, 0xbe, 0x40000000, &(0x7f00000002c0)={{0x3, @bcast, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b8af0bbd1075707065726869723d2e2f66696c65302c6c6f77657264690200000000000000302c776f65315c00"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x4}}, 0x6, 0x1a, 0x6, 0x1, 0x40}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r2, 0x1, 0x30}, &(0x7f0000000380)=0xc) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') setxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x1) unlink(&(0x7f0000000000)='./file0\x00') [ 2390.390153][ T4946] overlayfs: unrecognized mount option "¸¯ ½upperhir=./file0" or missing value [ 2390.429152][ T4958] overlayfs: unrecognized mount option "¸¯ ½upperhir=./file0" or missing value 05:08:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf0}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:08:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x18f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:08:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x3, 0x1f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:59 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66698165302c776f726b6469723d2e2f66696c65315c00a9a903e8acfe4148046ecb3bdd1fd888c7a0d12306fe6da78f0e16247e61cea46b1166ae3065a77fa4f6c8af6e77dbcd723b6a84d603c59e56f5d5c2ecbbdedeac9208dc38dd0f3d05ecd914e00bfe3b18e85aaaaf3b6e5c732412af533e2a1dc44a0a0e1b6e489c5d6e73982f82e33fb9cb29177189772f8c3682d25a3d5c538888d01f3867ec7feaccbb907a44683ef4acd9"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:08:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:08:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:08:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x34a}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2390.536909][ T4976] overlayfs: failed to resolve './fie0': -2 [ 2390.578020][ T4987] overlayfs: failed to resolve './fie0': -2 05:09:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x222, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl(r0, 0x7fff, &(0x7f0000000080)="e764eb3b33353d58f07da91197ca03ce1876a75f2366ec24714827e5d63aac8348a7e245359c9ba91285011fd30c1ac7776134d6fdd0b77aad93") 05:09:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:09:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xa00}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:00 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75707065726469723d2eaf66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x20000, 0x46) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:09:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x190, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:09:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x1100}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2391.250162][ T5005] overlayfs: failed to resolve '.¯file0': -2 05:09:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:09:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 05:09:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x26e8}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2391.295289][ T5016] overlayfs: failed to resolve '.¯file0': -2 [ 2391.854291][ C1] net_ratelimit: 20 callbacks suppressed [ 2391.854301][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.865798][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.871603][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.877357][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.883100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.888860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.934374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.940184][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:09:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x223, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x191, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) syz_extract_tcp_res(&(0x7f00000001c0), 0x8, 0x100) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = dup2(r0, r0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0xf5, 0x0, [0x8, 0x1, 0x9, 0xf3b5]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x3e80}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 05:09:01 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 05:09:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x3ec0}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:01 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xf) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x20}, 0x4) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0xfffffffffffffffd) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000380)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 05:09:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x3f00}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:01 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/ip6_tables_targets\x00') ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000740)="b1a409f3f676d0488beca3cc651e24d80f4697b59d4838e5e323b41a0b42859470fcec523a3f55784cc38e51c5f3da12ce8eefcd0a131b5e839a23c31b16efa9247c029d54f7b396cfaab7c72bef188ae796ee97f61412e34c57834fc4b0a38dc0c902492d54846d75f76a2a7d062c638fe9555d050bcf66652ea08c857fccf94cd7853dd44bf2a38d31f7f3614690966e690f54714effa379e954f344c1a83440d755d60cc32eedc6d5dca796549abefafef79ac2c7245af8919021383b92fb95e0157e1f72fe0c3c33c26560099db4762619ea33676f08673f81eddbc27a2a43f607c9a7d0", 0xe6) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540)=ANY=[]) sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="8e6b858ea6e8b6b09ae50a65065310378bcf67feab274267db249ba0ab69b44345222d3d417494bb9b8d55021ee9b808053ab9ebf42d10dc307a13e15700cbbf1103fe90c6c6f08ad4a6c8caa76ce02f291e04c206c47c3bbfb6b4680e35d7105434066c879580bb6d8362bb30f971c823370689fac85d30c65ba9a8ae65e49e1242d5dfc3752173b0f495334200cc11a807f0f8ef6cb28a5ac5e18bc2f2e161060f31b2a1547ff0a494388d24fbaed0a48c2b03142cad1d2f6d38d383816d7bde3f10b1dd2c4d1ba472a7a32aade1ecf9c0d94b08f5b05f44728e0517c020ef5aab862b", 0xe4}, {&(0x7f0000000300)="92c82272788a77fe85c56899533d4a2ec0e5", 0x12}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x138}, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000091) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)=0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000140)={0x8, 0x581, 0x0, 0x40, 0x8, 0x7f, 0x8}, 0xc) [ 2392.414289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2392.420138][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2392.449496][T21880] Bluetooth: hci0: Frame reassembly failed (-84) 05:09:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x224, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x4a03}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:01 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000200)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x210000, 0x0) 05:09:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x192, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x803e}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = dup3(r1, r1, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x2000, 0x0, &(0x7f00000000c0)}, {0x6, 0xeb, &(0x7f0000000380)=""/235}, {0x5000, 0xbd, &(0x7f0000000480)=""/189}, {0x101002, 0x4b, &(0x7f0000000540)=""/75}, {0x10000, 0x1e, &(0x7f0000000240)=""/30}, {0x4000, 0x3e, &(0x7f00000005c0)=""/62}, {0x104000, 0x1000, &(0x7f0000000700)=""/4096}, {0x0, 0x51, &(0x7f0000000600)=""/81}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x1, r2}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x193, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xc000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2394.494485][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 2394.500599][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2396.574367][ T4100] Bluetooth: hci0: command 0x1001 tx timeout [ 2396.580454][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2398.104462][ C1] net_ratelimit: 20 callbacks suppressed [ 2398.104480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2398.115966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2398.121725][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2398.127531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2398.133297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2398.139042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2398.174304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2398.180059][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2398.654316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2398.660113][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2398.666036][ T3681] Bluetooth: hci0: command 0x1009 tx timeout 05:09:11 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3f, 0x100) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000480)={0xb, @win={{0x49a94004, 0x5, 0x4, 0x3}, 0x1, 0x8, &(0x7f00000001c0)={{0x100, 0x1, 0x9, 0x4}, &(0x7f0000000180)={{0x8, 0x8, 0x5, 0xff}, &(0x7f0000000140)={{0x7fff, 0x0, 0x2, 0x4}}}}, 0x4, &(0x7f0000000380)="ead5d6000c007549e799a7c895b632d39f0d9814295430c7e558d602d9103d630b65e4064f5f975db291c719c8171d2394f653f2a9edd506a5e73eef58bfb6ce3720ba1df317c6cf5ffad9fdbde9ee2a4561d7597511062ea4df87ccb57077cde576e6f98c1547ef390142a70c0c6060d2abf56f583bbbca440a5f91117b556962997bb8f332fe6019db5d150e3e7df2f69af93aa31c1662e9c5538540b7816a2ad48d5eefc4e10e826b6792a0942cd6c84e757d13d1a383fd71e8820358ffd244c8ec10f4e245eb165143ebadcd49addf24c05b297a6a7598c30cb4aeef66732163fb0288865b9d", 0x400}}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x12040, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @sack_perm, @mss={0x2, 0xfffffffffffffffa}], 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x194, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xc03e}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x225, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:11 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, 0x0}, 0x0) 05:09:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xe826}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x4}}}, &(0x7f0000000080)=0x84) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000380)="f6edc6e7c4da8bba1d85f82f2a311f2949f1f9e4b76081f3e800df54d5d5cb52d3796e5280a9af0e2370fb7df98cbb7c211d6728ec787acfb9188ada2cf57828d8d07fc0402315eef5977065090624b45e4ab397b7fd260421c8f5c0ccc52bad0d6c8adac2502df752c43f2d3073ea2dcabbfb8746aeed2955eb4d39a976174d426e080ae7850d0ef19d9fff264f1b8c3dced3782a0150e3e4878ba92074a4b6e5259883aa919cc6db07523d3963884574ca1a5696518ff5c94832cd78ac47cedecede4c870b36b0801982") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0xf688}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x195, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:09:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x7d000000000000, 0x2c0000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000003c0)=0xfffffffffffffffe) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x196, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x33fe0}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 2403.460279][ T7] rpcbind: RPC call returned error 22 [ 2403.480767][ T7] rpcbind: RPC call returned error 22 05:09:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x226, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x78, 0x4, 0x315, "5f6070288ebef7480fa15a8b2a8e3c84b95eab6e856537d85e6b7544bbda266b1606432ca4c1dbcceea5abbf1521c70865db2f50f073727a26a13ac866ed74a462ed2fc1cb4460ad05a9e2b7cc5496316887fcd13ceac7953f691088e677fe958c02b0e962dd624b007f5c3d6995c87a35ce297c22bb5f2d"}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000240)='syscall\x00') 05:09:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x34000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000003, &(0x7f0000000300)=0x1, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e26, @rand_addr=0x5}, 0x35c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000003c0)=[{0x4, 0x5, 0x0, 0x80000000}]}, 0xff44) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x9, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x20) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'veth0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000440)={0x2, 0x0, {0x35, 0x35, 0x15, 0x7, 0x8009, 0x0, 0x6, 0x69, 0xffffffffffffffff}}) read(r4, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r1, 0x4, 0x100000042800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8000) sendfile(r3, r4, 0x0, 0x80003) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000100)) 05:09:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x40000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYBLOB="8a44d10e2336498d5f871a3f86801e4b6277a9c03d9a33cbeacb55524373ff7466b43a902626fd864b0794446f206e369570a4831becd0838afe22e6bea009bb620710afe8132dec3266d1fc3f4de56c13f5890611abed2738b4f1787b36afcd5b8ea24da74784944d7aa1a851", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX, @ANYRESDEC=r0], @ANYPTR64, @ANYRES16=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], @ANYRES64=r0]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x400300}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/97, 0x0, 0x3}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) 05:09:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x600) 05:09:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x197, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2404.344295][ C1] net_ratelimit: 20 callbacks suppressed [ 2404.344302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2404.355783][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2404.361542][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2404.367347][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2404.373160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2404.379011][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2404.424309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2404.430113][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:09:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x227, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf0ff7f}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x600) 05:09:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "b06a88e6f2064b6741e230bb375b6898"}, 0x11, 0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl(r0, 0x101, &(0x7f0000000140)="71a98c4f75556aa977130be0c8773c318609416c3bdfcdfb01799de2e1d7b04513a0cc4d2faa239e98f34e5146790a7db1fb01a75ead2bd9230be39dec820e8b87d7be1a399a575604c23aa655f80e65cda556982829dabff5677068e0ca40fbf949b5c0f82f1ebdabbb1584f00bafe173567421c0a536df04c1cf22eec64e81c21765f199d4ccd938a53632cc80be96715018ba4a954242763856bf0754cc1c8f5dabfe327a8ec13608b028") ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0xfffffffffffffffe) 05:09:13 executing program 4: r0 = open(&(0x7f0000000040)='./file2\x00', 0x333000, 0x1d0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000002c0)=""/224) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x23, 0x4, 0x6, "0ed11a5c128a615e80b7f17b8e82afc2", "37ca2fa8de7e64fced61d19e6d69"}, 0x23, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 05:09:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x198, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf0ffff}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x600) 05:09:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x199, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x4, 0x53b, 0x6, 0x4}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2404.894338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2404.900195][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:09:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x1000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2118000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x611, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 2405.120529][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 05:09:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x2000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:14 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x228, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x19a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400001, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x9, 0x0, 0x3, 0x0, 0x0, [], [], [], 0x122, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xa000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:14 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000000)=""/156, 0x0, 0x1000000000000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x11000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:14 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2407.134262][ T8548] Bluetooth: hci0: command 0x1003 tx timeout [ 2407.140406][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2409.214285][ T8548] Bluetooth: hci0: command 0x1001 tx timeout [ 2409.220435][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2410.574307][ C1] net_ratelimit: 20 callbacks suppressed [ 2410.579995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.585742][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.591501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.597235][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.602968][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.608743][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.654310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.660105][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.134309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.140117][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.294339][T31237] Bluetooth: hci0: command 0x1009 tx timeout 05:09:24 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x3f000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="d5d17f5ec5ee1613a991396ce5f5952568f7fd7eff7ed966efb86d5306fbd46e528d1de26f0f591049d6b48389a3ba1452fff537140389fc4a32f60dc0c90749cb45929dcabcf65ff8a3a67ffbcbbe1b3c73989e91bf6b3913b0da", 0x5b, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000540)=[{&(0x7f0000000440)="7d4caf68a5da5d3b80ec834722d6a3dd0e76c108f3f1ffccfa00f868ead9890bf1022eccc9f745a16c1ed13fbeec293b0b63c75e48dd1af53a9715033f4fd4f6ad05e7b1b0fb3a62980e24967f2ea8ac9e9fe1fa9778579243c5257ea9b5e3e6aa92217352ebfc52274df4711fad1342b6556074eb8066ad6795d257130fd7a13e81497fb8ce82396bf0eb544824dd7ec8e4765247c11545b70a15ad164c485d0600501cd635bd93015f3892b5d6412ee7dddd612a5351d2d78f69f1422fa3b5324a5a248629bd6bc04669b1950456392f17aedc6566122e88d635a31336fee83c", 0xe1}, {&(0x7f0000000700)="337d26fc9883ecf8a57f8191f7a7e78faa269404704ba2eccf40b0a5fa6fd5c1faa3e03f0fe4f3536e8d0b29794becb51ed4ef76022ba4f4eae9608b30073faacf9541ca1e230baa05518da7de128c1346b5db1d3acc22a828e8c9ad3dfa684bc0b62a90702eb82a83098df0676afdb0de55f4bec9a685ccca68a4c6ac6eaf7a7620eca5643ad7876e9be4079e83d66cbaba638d9238bc2b8370d0b4b256f2cce5546a896c002baa18fedd1410b301beb0d9fa557d3474188356e09b891336db080db7abc11215339daea594056fd58a1d27b4acda47a6c29a14efaa0c4d3dd5f018a0ad09d74c7407a9c7cf05a39d5b0069fc852d", 0xf5}, {&(0x7f0000000800)="26a36459e5416377a8f55c2415172fd6305bb80e2da97fec5c525dc58ef359bd77044470a80a5078c9160c899996b499ea4d402f7f605f8d2e4daadb147e37817151fd1a838a94c369a15e9331177da3e922fe63142d5271a1dd550ad168ee513da21c499d3d0b30b9c6b1a7dc55089541c6798918760e1925b55ecda294e10fda45eb0b3c16d2a28a3c9175aa4deda8a36e45b33c6d77a36b", 0x99}], 0x3, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000140)="ab114b", &(0x7f0000000180)=""/144}, 0x18) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x19b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x229, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2415.214807][ T5380] FAULT_INJECTION: forcing a failure. [ 2415.214807][ T5380] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.249858][ T5380] CPU: 1 PID: 5380 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 05:09:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x4a030000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2415.258817][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.268870][ T5380] Call Trace: [ 2415.272183][ T5380] dump_stack+0x172/0x1f0 [ 2415.276528][ T5380] should_fail.cold+0xa/0x15 [ 2415.281129][ T5380] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2415.286976][ T5380] ? ___might_sleep+0x163/0x280 [ 2415.291864][ T5380] __should_failslab+0x121/0x190 [ 2415.296822][ T5380] should_failslab+0x9/0x14 [ 2415.301393][ T5380] kmem_cache_alloc_trace+0x2d1/0x760 [ 2415.306777][ T5380] ? ___might_sleep+0x163/0x280 05:09:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2415.311638][ T5380] hci_alloc_dev+0x43/0x1d00 [ 2415.316351][ T5380] hci_uart_tty_ioctl+0x2d7/0xb00 [ 2415.321444][ T5380] tty_ioctl+0xac9/0x14d0 [ 2415.325799][ T5380] ? hci_uart_init_work+0x150/0x150 [ 2415.331103][ T5380] ? tty_register_device+0x40/0x40 [ 2415.336219][ T5380] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2415.342461][ T5380] ? tomoyo_init_request_info+0x105/0x1d0 [ 2415.348186][ T5380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2415.354434][ T5380] ? tomoyo_path_number_perm+0x263/0x520 [ 2415.360068][ T5380] ? find_held_lock+0x35/0x130 05:09:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x7ffff000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2415.364834][ T5380] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2415.370654][ T5380] ? __fget+0x35a/0x550 [ 2415.374849][ T5380] ? tty_register_device+0x40/0x40 [ 2415.380003][ T5380] do_vfs_ioctl+0xd6e/0x1390 [ 2415.384603][ T5380] ? ioctl_preallocate+0x210/0x210 [ 2415.389735][ T5380] ? __fget+0x381/0x550 [ 2415.393932][ T5380] ? ksys_dup3+0x3e0/0x3e0 [ 2415.398350][ T5380] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2415.404593][ T5380] ? fput_many+0x12c/0x1a0 [ 2415.409059][ T5380] ? tomoyo_file_ioctl+0x23/0x30 05:09:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x803e0000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2415.414030][ T5380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2415.420306][ T5380] ? security_file_ioctl+0x93/0xc0 [ 2415.425440][ T5380] ksys_ioctl+0xab/0xd0 [ 2415.429598][ T5380] __x64_sys_ioctl+0x73/0xb0 [ 2415.434191][ T5380] do_syscall_64+0x103/0x610 [ 2415.438810][ T5380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2415.444706][ T5380] RIP: 0033:0x457e29 05:09:24 executing program 2: syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2415.448884][ T5380] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2415.468483][ T5380] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2415.476890][ T5380] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2415.484857][ T5380] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2415.492825][ T5380] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2415.500802][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 05:09:24 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2415.508782][ T5380] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2415.519758][ T5380] Bluetooth: Can't allocate HCI device 05:09:24 executing program 2: syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xc0000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2415.633227][ T5409] FAULT_INJECTION: forcing a failure. [ 2415.633227][ T5409] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.667730][ T5409] CPU: 1 PID: 5409 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2415.676676][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.686742][ T5409] Call Trace: [ 2415.690064][ T5409] dump_stack+0x172/0x1f0 [ 2415.694405][ T5409] should_fail.cold+0xa/0x15 [ 2415.699019][ T5409] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2415.704863][ T5409] ? ___might_sleep+0x163/0x280 [ 2415.709747][ T5409] __should_failslab+0x121/0x190 [ 2415.714736][ T5409] should_failslab+0x9/0x14 [ 2415.719252][ T5409] kmem_cache_alloc_trace+0x2d1/0x760 [ 2415.724697][ T5409] ? pm_runtime_init+0x311/0x3b0 [ 2415.729677][ T5409] ? device_initialize+0x1a1/0x440 [ 2415.734826][ T5409] h4_open+0x46/0x160 [ 2415.738811][ T5409] hci_uart_tty_ioctl+0x709/0xb00 [ 2415.743841][ T5409] tty_ioctl+0xac9/0x14d0 [ 2415.748172][ T5409] ? hci_uart_init_work+0x150/0x150 [ 2415.753369][ T5409] ? tty_register_device+0x40/0x40 [ 2415.758484][ T5409] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2415.764735][ T5409] ? tomoyo_init_request_info+0x105/0x1d0 [ 2415.764754][ T5409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2415.764790][ T5409] ? tomoyo_path_number_perm+0x263/0x520 [ 2415.764805][ T5409] ? find_held_lock+0x35/0x130 [ 2415.764821][ T5409] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2415.764848][ T5409] ? __fget+0x35a/0x550 [ 2415.764868][ T5409] ? tty_register_device+0x40/0x40 [ 2415.776813][ T5409] do_vfs_ioctl+0xd6e/0x1390 [ 2415.776833][ T5409] ? ioctl_preallocate+0x210/0x210 [ 2415.776846][ T5409] ? __fget+0x381/0x550 [ 2415.776881][ T5409] ? ksys_dup3+0x3e0/0x3e0 [ 2415.776894][ T5409] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2415.776908][ T5409] ? fput_many+0x12c/0x1a0 [ 2415.776927][ T5409] ? tomoyo_file_ioctl+0x23/0x30 [ 2415.776943][ T5409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2415.776960][ T5409] ? security_file_ioctl+0x93/0xc0 [ 2415.776978][ T5409] ksys_ioctl+0xab/0xd0 [ 2415.777011][ T5409] __x64_sys_ioctl+0x73/0xb0 [ 2415.856161][ T5409] do_syscall_64+0x103/0x610 [ 2415.860757][ T5409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2415.866656][ T5409] RIP: 0033:0x457e29 [ 2415.870544][ T5409] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2415.890127][ T5409] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2415.898531][ T5409] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2415.906488][ T5409] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2415.914440][ T5409] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2415.922417][ T5409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2415.930381][ T5409] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 05:09:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x10800) ioctl$RTC_UIE_OFF(r1, 0x7004) connect$ax25(r1, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000200)=0x1) 05:09:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xc03e0000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x22a, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x19c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:24 executing program 2: syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:24 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 2416.079942][ T5434] FAULT_INJECTION: forcing a failure. [ 2416.079942][ T5434] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.119433][ T5434] CPU: 1 PID: 5434 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 05:09:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xe03f0300}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000140)="e6b7ebb96a217e2fcc85c78a2c323266fa297cd0e66966bb91dae80b3bed3f2285eec7d9ee8ebe6094d1be3414f085cdb5574eca22f37e41d7d6f16c74f8ed3708bd05f56eb195e84f9ce56f655628cbf17779b294a14f41d89103f976ba7b184638ac400b0bb107a814ee9f85e897e09555401e969cce0da063e15be8d580c475f1d491", 0x84) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2416.128388][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2416.138462][ T5434] Call Trace: [ 2416.141755][ T5434] dump_stack+0x172/0x1f0 [ 2416.146109][ T5434] should_fail.cold+0xa/0x15 [ 2416.150748][ T5434] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2416.156592][ T5434] ? ___might_sleep+0x163/0x280 [ 2416.161453][ T5434] __should_failslab+0x121/0x190 [ 2416.166401][ T5434] should_failslab+0x9/0x14 [ 2416.170913][ T5434] __kmalloc+0x2dc/0x740 [ 2416.175195][ T5434] ? alloc_workqueue+0x13c/0xe70 05:09:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xe8260000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2416.180137][ T5434] alloc_workqueue+0x13c/0xe70 [ 2416.184946][ T5434] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2416.190730][ T5434] ? scnprintf+0x140/0x140 [ 2416.195173][ T5434] ? kmem_cache_alloc_trace+0x354/0x760 [ 2416.200728][ T5434] hci_register_dev+0x1b8/0x860 [ 2416.205599][ T5434] ? __raw_spin_lock_init+0x2d/0x100 [ 2416.210894][ T5434] hci_uart_tty_ioctl+0x766/0xb00 [ 2416.215920][ T5434] tty_ioctl+0xac9/0x14d0 [ 2416.220246][ T5434] ? hci_uart_init_work+0x150/0x150 [ 2416.225465][ T5434] ? tty_register_device+0x40/0x40 [ 2416.230580][ T5434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2416.236828][ T5434] ? tomoyo_init_request_info+0x105/0x1d0 [ 2416.242554][ T5434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2416.248806][ T5434] ? tomoyo_path_number_perm+0x263/0x520 [ 2416.254449][ T5434] ? find_held_lock+0x35/0x130 [ 2416.259213][ T5434] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2416.265041][ T5434] ? __fget+0x35a/0x550 [ 2416.269200][ T5434] ? tty_register_device+0x40/0x40 [ 2416.274336][ T5434] do_vfs_ioctl+0xd6e/0x1390 05:09:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xeffdffff}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2416.278934][ T5434] ? ioctl_preallocate+0x210/0x210 [ 2416.284046][ T5434] ? __fget+0x381/0x550 [ 2416.288213][ T5434] ? ksys_dup3+0x3e0/0x3e0 [ 2416.292639][ T5434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2416.298878][ T5434] ? fput_many+0x12c/0x1a0 [ 2416.303324][ T5434] ? tomoyo_file_ioctl+0x23/0x30 [ 2416.308294][ T5434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2416.314573][ T5434] ? security_file_ioctl+0x93/0xc0 [ 2416.319690][ T5434] ksys_ioctl+0xab/0xd0 [ 2416.323888][ T5434] __x64_sys_ioctl+0x73/0xb0 05:09:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf6ffffff}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2416.328485][ T5434] do_syscall_64+0x103/0x610 [ 2416.333081][ T5434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2416.338968][ T5434] RIP: 0033:0x457e29 [ 2416.342874][ T5434] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2416.362481][ T5434] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2416.370894][ T5434] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 05:09:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xfeffffff}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2416.378869][ T5434] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2416.386839][ T5434] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2416.394809][ T5434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2416.402813][ T5434] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2416.427240][ T5434] Bluetooth: Can't register HCI device [ 2416.814314][ C1] net_ratelimit: 20 callbacks suppressed [ 2416.814322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.826120][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.831910][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.837663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.843576][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.849328][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:09:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x19d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)) 05:09:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xfffff000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:25 executing program 4 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x22b, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) [ 2416.894344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.900195][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.983484][ T5484] FAULT_INJECTION: forcing a failure. [ 2416.983484][ T5484] name failslab, interval 1, probability 0, space 0, times 0 05:09:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2417.029556][ T5484] CPU: 0 PID: 5484 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2417.038533][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.048581][ T5484] Call Trace: [ 2417.048619][ T5484] dump_stack+0x172/0x1f0 [ 2417.056209][ T5484] should_fail.cold+0xa/0x15 [ 2417.056229][ T5484] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2417.056251][ T5484] ? ___might_sleep+0x163/0x280 [ 2417.056273][ T5484] __should_failslab+0x121/0x190 05:09:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2417.056295][ T5484] should_failslab+0x9/0x14 [ 2417.080921][ T5484] kmem_cache_alloc_trace+0x2d1/0x760 [ 2417.086310][ T5484] ? rcu_read_lock_sched_held+0x110/0x130 [ 2417.092048][ T5484] ? __kmalloc+0x5d5/0x740 [ 2417.096507][ T5484] alloc_workqueue_attrs+0x82/0x120 [ 2417.101713][ T5484] alloc_workqueue+0x166/0xe70 [ 2417.106503][ T5484] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2417.112243][ T5484] ? scnprintf+0x140/0x140 [ 2417.116684][ T5484] ? kmem_cache_alloc_trace+0x354/0x760 [ 2417.116707][ T5484] hci_register_dev+0x1b8/0x860 05:09:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2417.116741][ T5484] ? __raw_spin_lock_init+0x2d/0x100 [ 2417.116762][ T5484] hci_uart_tty_ioctl+0x766/0xb00 [ 2417.116782][ T5484] tty_ioctl+0xac9/0x14d0 [ 2417.116802][ T5484] ? hci_uart_init_work+0x150/0x150 [ 2417.127173][ T5484] ? tty_register_device+0x40/0x40 [ 2417.127191][ T5484] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2417.127208][ T5484] ? tomoyo_init_request_info+0x105/0x1d0 [ 2417.127226][ T5484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2417.127239][ T5484] ? tomoyo_path_number_perm+0x263/0x520 05:09:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2417.127258][ T5484] ? find_held_lock+0x35/0x130 [ 2417.180694][ T5484] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2417.186519][ T5484] ? __fget+0x35a/0x550 [ 2417.190689][ T5484] ? tty_register_device+0x40/0x40 [ 2417.195813][ T5484] do_vfs_ioctl+0xd6e/0x1390 [ 2417.200417][ T5484] ? ioctl_preallocate+0x210/0x210 [ 2417.205533][ T5484] ? __fget+0x381/0x550 [ 2417.209694][ T5484] ? ksys_dup3+0x3e0/0x3e0 [ 2417.214123][ T5484] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2417.220371][ T5484] ? fput_many+0x12c/0x1a0 [ 2417.224795][ T5484] ? tomoyo_file_ioctl+0x23/0x30 05:09:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2417.229740][ T5484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2417.235999][ T5484] ? security_file_ioctl+0x93/0xc0 [ 2417.241121][ T5484] ksys_ioctl+0xab/0xd0 [ 2417.245284][ T5484] __x64_sys_ioctl+0x73/0xb0 [ 2417.249888][ T5484] do_syscall_64+0x103/0x610 [ 2417.254493][ T5484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2417.260385][ T5484] RIP: 0033:0x457e29 [ 2417.264288][ T5484] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2417.283903][ T5484] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2417.292316][ T5484] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2417.300407][ T5484] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2417.308778][ T5484] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2417.316749][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2417.324715][ T5484] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2417.341009][ T5484] Bluetooth: Can't register HCI device [ 2417.534405][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2417.540180][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:09:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x19e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xfffffdef}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$sock_bt_hci(r2, 0xc00448f6, &(0x7f0000000180)="6209fcf23aa77dc0e032086e85475f61f45bba520ed42f25d71f9de931136e9f9faa4073369cb7f069fd26455e62f4c90cbe2ee408e27ed6c6c0a6cb89202383") 05:09:26 executing program 4 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x22c, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) [ 2417.860905][ T5520] FAULT_INJECTION: forcing a failure. [ 2417.860905][ T5520] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.889353][ T5520] CPU: 1 PID: 5520 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2417.898299][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.908344][ T5520] Call Trace: [ 2417.908372][ T5520] dump_stack+0x172/0x1f0 [ 2417.908397][ T5520] should_fail.cold+0xa/0x15 [ 2417.908419][ T5520] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2417.908443][ T5520] ? ___might_sleep+0x163/0x280 [ 2417.908467][ T5520] __should_failslab+0x121/0x190 [ 2417.936240][ T5520] should_failslab+0x9/0x14 [ 2417.940746][ T5520] __kmalloc_track_caller+0x2d8/0x740 [ 2417.946122][ T5520] ? pointer+0x910/0x910 [ 2417.950383][ T5520] ? set_precision+0x180/0x180 [ 2417.955152][ T5520] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2417.960808][ T5520] ? kasprintf+0xbb/0xf0 [ 2417.965091][ T5520] kvasprintf+0xc8/0x170 [ 2417.969332][ T5520] ? bust_spinlocks+0xe0/0xe0 [ 2417.974024][ T5520] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2417.979768][ T5520] ? find_next_bit+0x107/0x130 [ 2417.984538][ T5520] kasprintf+0xbb/0xf0 [ 2417.988609][ T5520] ? kvasprintf_const+0x190/0x190 [ 2417.993678][ T5520] ? kasan_check_read+0x11/0x20 [ 2417.998563][ T5520] alloc_workqueue+0x442/0xe70 [ 2418.003356][ T5520] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2418.009060][ T5520] ? kmem_cache_alloc_trace+0x354/0x760 [ 2418.014615][ T5520] hci_register_dev+0x1b8/0x860 [ 2418.019468][ T5520] ? __raw_spin_lock_init+0x2d/0x100 [ 2418.024754][ T5520] hci_uart_tty_ioctl+0x766/0xb00 [ 2418.029798][ T5520] tty_ioctl+0xac9/0x14d0 [ 2418.034108][ T5520] ? hci_uart_init_work+0x150/0x150 [ 2418.039285][ T5520] ? tty_register_device+0x40/0x40 [ 2418.044387][ T5520] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2418.050617][ T5520] ? tomoyo_init_request_info+0x105/0x1d0 [ 2418.056328][ T5520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.062571][ T5520] ? tomoyo_path_number_perm+0x263/0x520 [ 2418.068195][ T5520] ? find_held_lock+0x35/0x130 [ 2418.072951][ T5520] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2418.078760][ T5520] ? __fget+0x35a/0x550 [ 2418.082920][ T5520] ? tty_register_device+0x40/0x40 [ 2418.088039][ T5520] do_vfs_ioctl+0xd6e/0x1390 [ 2418.092627][ T5520] ? ioctl_preallocate+0x210/0x210 [ 2418.097754][ T5520] ? __fget+0x381/0x550 [ 2418.101922][ T5520] ? ksys_dup3+0x3e0/0x3e0 [ 2418.106342][ T5520] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2418.112578][ T5520] ? fput_many+0x12c/0x1a0 [ 2418.117021][ T5520] ? tomoyo_file_ioctl+0x23/0x30 [ 2418.121954][ T5520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2418.128196][ T5520] ? security_file_ioctl+0x93/0xc0 [ 2418.133299][ T5520] ksys_ioctl+0xab/0xd0 [ 2418.137463][ T5520] __x64_sys_ioctl+0x73/0xb0 [ 2418.142056][ T5520] do_syscall_64+0x103/0x610 [ 2418.146640][ T5520] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2418.152521][ T5520] RIP: 0033:0x457e29 [ 2418.156412][ T5520] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2418.176021][ T5520] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2418.184431][ T5520] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2418.192420][ T5520] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2418.200400][ T5520] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:09:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xffffff7f}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2418.208379][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2418.216354][ T5520] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 05:09:27 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) socket$inet(0x2, 0x0, 0x101) [ 2418.260222][T21880] Bluetooth: hci0: Frame reassembly failed (-84) 05:09:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xfffffff6}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xfffffffe}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x19f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:27 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000240)={0x8, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:27 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x7ffffffff000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2420.334276][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 2420.340431][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2422.414331][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 2422.420420][ T3624] Bluetooth: hci0: sending frame failed (-49) [ 2423.054355][ C1] net_ratelimit: 20 callbacks suppressed [ 2423.054361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2423.065797][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2423.071551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2423.077324][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2423.083072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2423.088813][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2423.134271][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2423.140021][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2423.774310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2423.780127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2424.494322][T31237] Bluetooth: hci0: command 0x1009 tx timeout 05:09:37 executing program 4 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x22d, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x4000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1a0, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x40030000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200100, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) [ 2428.658819][ T5591] FAULT_INJECTION: forcing a failure. [ 2428.658819][ T5591] name failslab, interval 1, probability 0, space 0, times 0 [ 2428.731847][ T5591] CPU: 0 PID: 5591 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2428.740820][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2428.750879][ T5591] Call Trace: [ 2428.754181][ T5591] dump_stack+0x172/0x1f0 [ 2428.758526][ T5591] should_fail.cold+0xa/0x15 [ 2428.763127][ T5591] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2428.768938][ T5591] ? ___might_sleep+0x163/0x280 [ 2428.773801][ T5591] __should_failslab+0x121/0x190 [ 2428.778747][ T5591] should_failslab+0x9/0x14 [ 2428.783258][ T5591] __kmalloc+0x2dc/0x740 [ 2428.787517][ T5591] ? apply_wqattrs_prepare+0xae/0x970 [ 2428.792895][ T5591] apply_wqattrs_prepare+0xae/0x970 [ 2428.798093][ T5591] apply_workqueue_attrs_locked+0xcb/0x140 [ 2428.803881][ T5591] apply_workqueue_attrs+0x31/0x50 [ 2428.808973][ T5591] alloc_workqueue+0x84c/0xe70 [ 2428.813739][ T5591] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2428.819481][ T5591] ? kmem_cache_alloc_trace+0x354/0x760 [ 2428.825016][ T5591] hci_register_dev+0x1b8/0x860 [ 2428.829847][ T5591] ? __raw_spin_lock_init+0x2d/0x100 [ 2428.835117][ T5591] hci_uart_tty_ioctl+0x766/0xb00 [ 2428.840134][ T5591] tty_ioctl+0xac9/0x14d0 [ 2428.844442][ T5591] ? hci_uart_init_work+0x150/0x150 [ 2428.849620][ T5591] ? tty_register_device+0x40/0x40 [ 2428.854710][ T5591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2428.860939][ T5591] ? tomoyo_init_request_info+0x105/0x1d0 [ 2428.866670][ T5591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.872902][ T5591] ? tomoyo_path_number_perm+0x263/0x520 [ 2428.878511][ T5591] ? find_held_lock+0x35/0x130 [ 2428.883253][ T5591] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2428.889047][ T5591] ? __fget+0x35a/0x550 [ 2428.893185][ T5591] ? tty_register_device+0x40/0x40 [ 2428.898281][ T5591] do_vfs_ioctl+0xd6e/0x1390 [ 2428.902854][ T5591] ? ioctl_preallocate+0x210/0x210 [ 2428.907942][ T5591] ? __fget+0x381/0x550 [ 2428.912097][ T5591] ? ksys_dup3+0x3e0/0x3e0 [ 2428.916508][ T5591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2428.922731][ T5591] ? fput_many+0x12c/0x1a0 [ 2428.927133][ T5591] ? tomoyo_file_ioctl+0x23/0x30 [ 2428.932052][ T5591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.938277][ T5591] ? security_file_ioctl+0x93/0xc0 [ 2428.943371][ T5591] ksys_ioctl+0xab/0xd0 [ 2428.947507][ T5591] __x64_sys_ioctl+0x73/0xb0 [ 2428.952096][ T5591] do_syscall_64+0x103/0x610 [ 2428.956672][ T5591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.962541][ T5591] RIP: 0033:0x457e29 [ 2428.966424][ T5591] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2428.986013][ T5591] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2428.994399][ T5591] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2429.002369][ T5591] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2429.010337][ T5591] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2429.018298][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 05:09:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf0ff7f00000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1a1, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2429.026258][ T5591] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2429.062148][ T5591] Bluetooth: Can't register HCI device 05:09:38 executing program 4 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 2429.190864][ T5622] FAULT_INJECTION: forcing a failure. [ 2429.190864][ T5622] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.203634][ T5622] CPU: 0 PID: 5622 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2429.212579][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2429.222612][ T5622] Call Trace: [ 2429.225885][ T5622] dump_stack+0x172/0x1f0 [ 2429.230198][ T5622] should_fail.cold+0xa/0x15 [ 2429.234773][ T5622] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2429.240573][ T5622] ? ___might_sleep+0x163/0x280 [ 2429.245420][ T5622] __should_failslab+0x121/0x190 [ 2429.250339][ T5622] should_failslab+0x9/0x14 [ 2429.254825][ T5622] kmem_cache_alloc_trace+0x2d1/0x760 [ 2429.260178][ T5622] ? rcu_read_lock_sched_held+0x110/0x130 [ 2429.265888][ T5622] ? __kmalloc+0x5d5/0x740 [ 2429.270302][ T5622] alloc_workqueue_attrs+0x82/0x120 [ 2429.275492][ T5622] apply_wqattrs_prepare+0xbb/0x970 [ 2429.280675][ T5622] apply_workqueue_attrs_locked+0xcb/0x140 [ 2429.286474][ T5622] apply_workqueue_attrs+0x31/0x50 [ 2429.291574][ T5622] alloc_workqueue+0x84c/0xe70 [ 2429.296336][ T5622] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2429.302070][ T5622] ? kmem_cache_alloc_trace+0x354/0x760 [ 2429.307623][ T5622] hci_register_dev+0x1b8/0x860 [ 2429.312470][ T5622] ? __raw_spin_lock_init+0x2d/0x100 [ 2429.317749][ T5622] hci_uart_tty_ioctl+0x766/0xb00 [ 2429.322799][ T5622] tty_ioctl+0xac9/0x14d0 [ 2429.327112][ T5622] ? hci_uart_init_work+0x150/0x150 [ 2429.332308][ T5622] ? tty_register_device+0x40/0x40 [ 2429.337401][ T5622] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2429.343632][ T5622] ? tomoyo_init_request_info+0x105/0x1d0 [ 2429.349334][ T5622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.355550][ T5622] ? tomoyo_path_number_perm+0x263/0x520 [ 2429.361159][ T5622] ? find_held_lock+0x35/0x130 [ 2429.365914][ T5622] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2429.371717][ T5622] ? __fget+0x35a/0x550 [ 2429.375875][ T5622] ? tty_register_device+0x40/0x40 [ 2429.380979][ T5622] do_vfs_ioctl+0xd6e/0x1390 [ 2429.385557][ T5622] ? ioctl_preallocate+0x210/0x210 [ 2429.390655][ T5622] ? __fget+0x381/0x550 [ 2429.394804][ T5622] ? ksys_dup3+0x3e0/0x3e0 [ 2429.399211][ T5622] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2429.405436][ T5622] ? fput_many+0x12c/0x1a0 [ 2429.409861][ T5622] ? tomoyo_file_ioctl+0x23/0x30 [ 2429.414794][ T5622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.421037][ T5622] ? security_file_ioctl+0x93/0xc0 [ 2429.426141][ T5622] ksys_ioctl+0xab/0xd0 [ 2429.430283][ T5622] __x64_sys_ioctl+0x73/0xb0 [ 2429.434858][ T5622] do_syscall_64+0x103/0x610 05:09:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x22e, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001, 0x4, &(0x7f0000000500)=[{&(0x7f0000000180)="2d1c648d50fadb28aa60d80acff801a39400229cf89d3ea953718c3113eae11b7a82b02de4a7c86401b40cd97f3354ec0e531f04c8be6ab83bc168dd783e711eda154e418bfc57ebdae4b80447e4891833e5110d7efcf8b1c08f5f91face792963ac3bb4b1b459740ccdebc6fc6eea96ad58396d5f08f11ce6003608d65a91165fca0040e3cd2b99d010c3de6063a55205b6aac34d9abdabb32f68f60f", 0x9d, 0x41}, {&(0x7f0000000380)="b448f0683f9fe1b928889bc5593f33520fd102881bb69c212bc6332556e515b264bc754a67afcd1306cb544cc692db81fd7d45d0d48ed4037e4528c290a81ee82629db792e7c3a3fd452636197ed57ef1fbd54c93704846c3dc5e8413eb931ac322ec6a293ff2315fd1658a834abc6fc3ae6335c67801ebe98878c2be1b8f238bcd546217e2d94f445caf1fa47261eb9388237da61954d0610b0e126fb620c786770f22530fe39632f200bc4fad32fcc015b", 0xb2, 0xfffffffffffffffc}, {&(0x7f0000000240), 0x0, 0x4}, {&(0x7f0000000440)="05c5768a9cc73a31832555e6e23171958c7c7b5232255d62455000660d9c85e011b9d032497776fa3c57d3019cf8d33729c0156f26d2296f6380eabe8c4123617d517fb8881a92f40abc08bee64e367ba60456e0ce3f7115319eb2fbdf8ee7c3f677f3a0712686439a33c9cf66d59b534aba0e88539c60093eafc178466a270e655f2d4bac27ea325b6369c0277383c08be183915aa15161c027bcdcfd43bed029aa", 0xa2, 0x6}], 0x10, &(0x7f0000000800)={[{@uid={'uid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@dir_umask={'dir_umask', 0x3d, 0x8000}}, {@quiet='quiet'}, {@file_umask={'file_umask', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "d2ebc2e8"}}], [{@seclabel='seclabel'}, {@dont_hash='dont_hash'}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x1000000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 05:09:38 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf0ffffff7f0000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2429.439452][ T5622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.445320][ T5622] RIP: 0033:0x457e29 [ 2429.449192][ T5622] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2429.469028][ T5622] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2429.477473][ T5622] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2429.485473][ T5622] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2429.493489][ T5622] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2429.501491][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2429.509462][ T5622] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2429.524614][ C1] net_ratelimit: 20 callbacks suppressed [ 2429.524627][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.536151][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:09:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf0ffffffffffff}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:38 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2429.541960][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.548233][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2429.550108][ T5622] Bluetooth: Can't register HCI device [ 2429.554034][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.565274][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2429.571119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2429.576928][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:09:38 executing program 4 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x100000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:38 executing program 3: [ 2429.683058][ T5649] FAULT_INJECTION: forcing a failure. [ 2429.683058][ T5649] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.711150][ T5649] CPU: 1 PID: 5649 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2429.720091][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2429.730228][ T5649] Call Trace: [ 2429.730257][ T5649] dump_stack+0x172/0x1f0 [ 2429.730282][ T5649] should_fail.cold+0xa/0x15 [ 2429.730304][ T5649] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2429.730327][ T5649] ? ___might_sleep+0x163/0x280 [ 2429.753153][ T5649] __should_failslab+0x121/0x190 [ 2429.758123][ T5649] should_failslab+0x9/0x14 [ 2429.762631][ T5649] kmem_cache_alloc_trace+0x2d1/0x760 [ 2429.768015][ T5649] ? rcu_read_lock_sched_held+0x110/0x130 [ 2429.773738][ T5649] ? __kmalloc+0x5d5/0x740 [ 2429.778167][ T5649] alloc_workqueue_attrs+0x82/0x120 05:09:38 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2429.783375][ T5649] apply_wqattrs_prepare+0xc8/0x970 [ 2429.788585][ T5649] apply_workqueue_attrs_locked+0xcb/0x140 [ 2429.794404][ T5649] apply_workqueue_attrs+0x31/0x50 [ 2429.799534][ T5649] alloc_workqueue+0x84c/0xe70 [ 2429.804313][ T5649] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2429.810050][ T5649] ? kmem_cache_alloc_trace+0x354/0x760 [ 2429.815607][ T5649] hci_register_dev+0x1b8/0x860 [ 2429.820464][ T5649] ? __raw_spin_lock_init+0x2d/0x100 [ 2429.825761][ T5649] hci_uart_tty_ioctl+0x766/0xb00 [ 2429.830786][ T5649] tty_ioctl+0xac9/0x14d0 [ 2429.835115][ T5649] ? hci_uart_init_work+0x150/0x150 [ 2429.835131][ T5649] ? tty_register_device+0x40/0x40 [ 2429.835146][ T5649] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2429.835162][ T5649] ? tomoyo_init_request_info+0x105/0x1d0 [ 2429.835179][ T5649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.835192][ T5649] ? tomoyo_path_number_perm+0x263/0x520 [ 2429.835205][ T5649] ? find_held_lock+0x35/0x130 [ 2429.835221][ T5649] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2429.835246][ T5649] ? __fget+0x35a/0x550 [ 2429.883983][ T5649] ? tty_register_device+0x40/0x40 [ 2429.889121][ T5649] do_vfs_ioctl+0xd6e/0x1390 [ 2429.893718][ T5649] ? ioctl_preallocate+0x210/0x210 [ 2429.898825][ T5649] ? __fget+0x381/0x550 [ 2429.902963][ T5649] ? ksys_dup3+0x3e0/0x3e0 [ 2429.907468][ T5649] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2429.913691][ T5649] ? fput_many+0x12c/0x1a0 [ 2429.918094][ T5649] ? tomoyo_file_ioctl+0x23/0x30 [ 2429.923032][ T5649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.929268][ T5649] ? security_file_ioctl+0x93/0xc0 [ 2429.934377][ T5649] ksys_ioctl+0xab/0xd0 [ 2429.938554][ T5649] __x64_sys_ioctl+0x73/0xb0 [ 2429.943150][ T5649] do_syscall_64+0x103/0x610 [ 2429.947742][ T5649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.953612][ T5649] RIP: 0033:0x457e29 [ 2429.957488][ T5649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2429.977306][ T5649] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2429.985744][ T5649] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2429.993694][ T5649] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2430.001661][ T5649] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2430.009612][ T5649] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2430.017579][ T5649] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2430.026087][ C1] protocol 88fb is buggy, dev hsr_slave_0 05:09:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1a2, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x200000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2430.031860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2430.039967][ T5649] Bluetooth: Can't register HCI device 05:09:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x22f, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:39 executing program 3: 05:09:39 executing program 4 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xa00000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1a3, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:39 executing program 3: 05:09:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2430.454688][ T5676] FAULT_INJECTION: forcing a failure. [ 2430.454688][ T5676] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.478498][ T5676] CPU: 1 PID: 5676 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2430.487420][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.497461][ T5676] Call Trace: [ 2430.500755][ T5676] dump_stack+0x172/0x1f0 05:09:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2430.505095][ T5676] should_fail.cold+0xa/0x15 [ 2430.509710][ T5676] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2430.515535][ T5676] ? ___might_sleep+0x163/0x280 [ 2430.515583][ T5676] __should_failslab+0x121/0x190 [ 2430.515601][ T5676] should_failslab+0x9/0x14 [ 2430.515617][ T5676] kmem_cache_alloc_node+0x264/0x710 [ 2430.515642][ T5676] alloc_unbound_pwq+0x4c5/0xcf0 [ 2430.529930][ T5676] apply_wqattrs_prepare+0x35e/0x970 [ 2430.529959][ T5676] apply_workqueue_attrs_locked+0xcb/0x140 05:09:39 executing program 3: [ 2430.529981][ T5676] apply_workqueue_attrs+0x31/0x50 [ 2430.545551][ T5676] alloc_workqueue+0x84c/0xe70 [ 2430.545577][ T5676] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2430.545611][ T5676] ? kmem_cache_alloc_trace+0x354/0x760 [ 2430.556499][ T5676] hci_register_dev+0x1b8/0x860 [ 2430.556516][ T5676] ? __raw_spin_lock_init+0x2d/0x100 [ 2430.556539][ T5676] hci_uart_tty_ioctl+0x766/0xb00 [ 2430.556565][ T5676] tty_ioctl+0xac9/0x14d0 [ 2430.556588][ T5676] ? hci_uart_init_work+0x150/0x150 [ 2430.597656][ T5676] ? tty_register_device+0x40/0x40 05:09:39 executing program 3: 05:09:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) [ 2430.602779][ T5676] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2430.609053][ T5676] ? tomoyo_init_request_info+0x105/0x1d0 [ 2430.614782][ T5676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2430.621044][ T5676] ? tomoyo_path_number_perm+0x263/0x520 [ 2430.626693][ T5676] ? find_held_lock+0x35/0x130 [ 2430.631457][ T5676] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2430.637277][ T5676] ? __fget+0x35a/0x550 [ 2430.641444][ T5676] ? tty_register_device+0x40/0x40 [ 2430.646570][ T5676] do_vfs_ioctl+0xd6e/0x1390 [ 2430.651162][ T5676] ? ioctl_preallocate+0x210/0x210 [ 2430.656277][ T5676] ? __fget+0x381/0x550 [ 2430.660446][ T5676] ? ksys_dup3+0x3e0/0x3e0 [ 2430.664866][ T5676] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2430.671104][ T5676] ? fput_many+0x12c/0x1a0 [ 2430.675532][ T5676] ? tomoyo_file_ioctl+0x23/0x30 [ 2430.680500][ T5676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2430.686749][ T5676] ? security_file_ioctl+0x93/0xc0 [ 2430.691919][ T5676] ksys_ioctl+0xab/0xd0 [ 2430.696093][ T5676] __x64_sys_ioctl+0x73/0xb0 [ 2430.700689][ T5676] do_syscall_64+0x103/0x610 [ 2430.705327][ T5676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2430.711216][ T5676] RIP: 0033:0x457e29 [ 2430.715129][ T5676] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2430.734739][ T5676] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.743156][ T5676] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2430.751134][ T5676] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2430.759110][ T5676] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2430.767101][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2430.775089][ T5676] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2430.788560][ T5676] Bluetooth: Can't register HCI device 05:09:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:40 executing program 3: 05:09:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x1100000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:40 executing program 4 (fault-call:2 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x230, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1a4, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 05:09:40 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x3f00000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2431.353801][ T5712] FAULT_INJECTION: forcing a failure. [ 2431.353801][ T5712] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.377818][ T5712] CPU: 0 PID: 5712 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2431.386783][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2431.396837][ T5712] Call Trace: 05:09:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x4a03000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2431.400142][ T5712] dump_stack+0x172/0x1f0 [ 2431.404493][ T5712] should_fail.cold+0xa/0x15 [ 2431.409100][ T5712] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2431.414918][ T5712] ? ___might_sleep+0x163/0x280 [ 2431.419780][ T5712] __should_failslab+0x121/0x190 [ 2431.424721][ T5712] should_failslab+0x9/0x14 [ 2431.429226][ T5712] __kmalloc+0x2dc/0x740 [ 2431.433485][ T5712] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2431.439210][ T5712] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 2431.444670][ T5712] ? alloc_workqueue+0x13c/0xe70 [ 2431.449802][ T5712] alloc_workqueue+0x13c/0xe70 05:09:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0x803e000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2431.454574][ T5712] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2431.460321][ T5712] ? kmem_cache_alloc_trace+0x354/0x760 [ 2431.465885][ T5712] hci_register_dev+0x209/0x860 [ 2431.470752][ T5712] hci_uart_tty_ioctl+0x766/0xb00 [ 2431.475783][ T5712] tty_ioctl+0xac9/0x14d0 [ 2431.480117][ T5712] ? hci_uart_init_work+0x150/0x150 [ 2431.485321][ T5712] ? tty_register_device+0x40/0x40 [ 2431.490450][ T5712] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2431.496696][ T5712] ? tomoyo_init_request_info+0x105/0x1d0 05:09:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xc000000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2431.502426][ T5712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.508682][ T5712] ? tomoyo_path_number_perm+0x263/0x520 [ 2431.514315][ T5712] ? find_held_lock+0x35/0x130 [ 2431.519086][ T5712] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2431.524937][ T5712] ? __fget+0x35a/0x550 [ 2431.529115][ T5712] ? tty_register_device+0x40/0x40 [ 2431.534231][ T5712] do_vfs_ioctl+0xd6e/0x1390 [ 2431.538842][ T5712] ? ioctl_preallocate+0x210/0x210 [ 2431.543959][ T5712] ? __fget+0x381/0x550 [ 2431.548139][ T5712] ? ksys_dup3+0x3e0/0x3e0 05:09:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xc03e000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2431.552567][ T5712] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2431.558815][ T5712] ? fput_many+0x12c/0x1a0 [ 2431.563246][ T5712] ? tomoyo_file_ioctl+0x23/0x30 [ 2431.568189][ T5712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2431.574437][ T5712] ? security_file_ioctl+0x93/0xc0 [ 2431.579853][ T5712] ksys_ioctl+0xab/0xd0 [ 2431.584030][ T5712] __x64_sys_ioctl+0x73/0xb0 [ 2431.588627][ T5712] do_syscall_64+0x103/0x610 [ 2431.593227][ T5712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2431.599128][ T5712] RIP: 0033:0x457e29 [ 2431.603030][ T5712] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2431.622626][ T5712] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2431.631059][ T5712] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2431.639047][ T5712] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2431.647006][ T5712] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:09:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x600) 05:09:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xe03f030000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:40 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x6}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 05:09:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x1a5, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) [ 2431.654958][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2431.662904][ T5712] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2431.690694][ T5712] Bluetooth: Can't register HCI device 05:09:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180), 0x231, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 05:09:41 executing program 4 (fault-call:2 fault-nth:10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 05:09:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xe826000000000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:41 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600) 05:09:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x600) [ 2432.206316][ T5761] ================================================================== [ 2432.214428][ T5761] BUG: KASAN: use-after-free in lockdep_register_key+0x3b9/0x490 [ 2432.222144][ T5761] Read of size 8 at addr ffff88809b14a118 by task syz-executor.4/5761 [ 2432.230321][ T5761] [ 2432.232652][ T5761] CPU: 0 PID: 5761 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 2432.241577][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.251629][ T5761] Call Trace: 05:09:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xeffdffff00000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) 05:09:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x600) [ 2432.254923][ T5761] dump_stack+0x172/0x1f0 [ 2432.259258][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.264641][ T5761] print_address_description.cold+0x7c/0x20d [ 2432.270619][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.275998][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.281367][ T5761] kasan_report.cold+0x1b/0x40 [ 2432.286134][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.291507][ T5761] __asan_report_load8_noabort+0x14/0x20 [ 2432.297138][ T5761] lockdep_register_key+0x3b9/0x490 05:09:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x600) [ 2432.302339][ T5761] alloc_workqueue+0x427/0xe70 [ 2432.307108][ T5761] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2432.312843][ T5761] ? kmem_cache_alloc_trace+0x354/0x760 [ 2432.318387][ T5761] hci_register_dev+0x1b8/0x860 [ 2432.323238][ T5761] ? __raw_spin_lock_init+0x2d/0x100 [ 2432.328538][ T5761] hci_uart_tty_ioctl+0x766/0xb00 [ 2432.333562][ T5761] tty_ioctl+0xac9/0x14d0 [ 2432.333578][ T5761] ? hci_uart_init_work+0x150/0x150 [ 2432.333592][ T5761] ? tty_register_device+0x40/0x40 [ 2432.333607][ T5761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2432.333622][ T5761] ? tomoyo_init_request_info+0x105/0x1d0 [ 2432.333643][ T5761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.343147][ T5761] ? tomoyo_path_number_perm+0x263/0x520 [ 2432.366368][ T5761] ? find_held_lock+0x35/0x130 [ 2432.366383][ T5761] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2432.366402][ T5761] ? __fget+0x35a/0x550 [ 2432.366419][ T5761] ? tty_register_device+0x40/0x40 [ 2432.366434][ T5761] do_vfs_ioctl+0xd6e/0x1390 [ 2432.366450][ T5761] ? ioctl_preallocate+0x210/0x210 [ 2432.366462][ T5761] ? __fget+0x381/0x550 [ 2432.366478][ T5761] ? ksys_dup3+0x3e0/0x3e0 [ 2432.366492][ T5761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2432.366504][ T5761] ? fput_many+0x12c/0x1a0 [ 2432.366524][ T5761] ? tomoyo_file_ioctl+0x23/0x30 [ 2432.386814][ T5761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.386831][ T5761] ? security_file_ioctl+0x93/0xc0 [ 2432.386846][ T5761] ksys_ioctl+0xab/0xd0 [ 2432.386862][ T5761] __x64_sys_ioctl+0x73/0xb0 [ 2432.386878][ T5761] do_syscall_64+0x103/0x610 [ 2432.386895][ T5761] entry_SYSCALL_64_after_hwframe+0x49/0xbe 05:09:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x600) 05:09:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0), 0x160}, 0xf6ffffff00000000}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x34b, 0x0) [ 2432.386905][ T5761] RIP: 0033:0x457e29 [ 2432.386919][ T5761] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2432.386934][ T5761] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2432.488110][ T5761] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2432.496077][ T5761] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2432.504045][ T5761] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2432.512022][ T5761] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2432.520006][ T5761] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2432.527981][ T5761] [ 2432.530316][ T5761] Allocated by task 5622: [ 2432.534648][ T5761] save_stack+0x45/0xd0 [ 2432.538806][ T5761] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2432.544435][ T5761] kasan_kmalloc+0x9/0x10 [ 2432.548760][ T5761] __kmalloc+0x15c/0x740 [ 2432.553009][ T5761] alloc_workqueue+0x13c/0xe70 [ 2432.557769][ T5761] hci_register_dev+0x1b8/0x860 [ 2432.562619][ T5761] hci_uart_tty_ioctl+0x766/0xb00 [ 2432.567642][ T5761] tty_ioctl+0xac9/0x14d0 [ 2432.571969][ T5761] do_vfs_ioctl+0xd6e/0x1390 [ 2432.576567][ T5761] ksys_ioctl+0xab/0xd0 [ 2432.580723][ T5761] __x64_sys_ioctl+0x73/0xb0 [ 2432.585317][ T5761] do_syscall_64+0x103/0x610 [ 2432.589908][ T5761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2432.595826][ T5761] [ 2432.598150][ T5761] Freed by task 5622: [ 2432.602131][ T5761] save_stack+0x45/0xd0 05:09:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x600) [ 2432.606301][ T5761] __kasan_slab_free+0x102/0x150 [ 2432.611231][ T5761] kasan_slab_free+0xe/0x10 [ 2432.615757][ T5761] kfree+0xcf/0x230 [ 2432.619563][ T5761] alloc_workqueue+0xc3e/0xe70 [ 2432.624327][ T5761] hci_register_dev+0x1b8/0x860 [ 2432.629182][ T5761] hci_uart_tty_ioctl+0x766/0xb00 [ 2432.634205][ T5761] tty_ioctl+0xac9/0x14d0 [ 2432.634218][ T5761] do_vfs_ioctl+0xd6e/0x1390 [ 2432.634230][ T5761] ksys_ioctl+0xab/0xd0 [ 2432.634241][ T5761] __x64_sys_ioctl+0x73/0xb0 [ 2432.634255][ T5761] do_syscall_64+0x103/0x610 [ 2432.634277][ T5761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2432.634280][ T5761] [ 2432.634290][ T5761] The buggy address belongs to the object at ffff88809b14a000 [ 2432.634290][ T5761] which belongs to the cache kmalloc-512 of size 512 [ 2432.634301][ T5761] The buggy address is located 280 bytes inside of [ 2432.634301][ T5761] 512-byte region [ffff88809b14a000, ffff88809b14a200) [ 2432.634313][ T5761] The buggy address belongs to the page: [ 2432.643222][ T5761] page:ffffea00026c5280 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0xffff88809b14a780 [ 2432.643233][ T5761] flags: 0x1fffc0000000200(slab) [ 2432.643252][ T5761] raw: 01fffc0000000200 ffffea00027fa6c8 ffffea00028d5548 ffff88812c3f0940 [ 2432.643273][ T5761] raw: ffff88809b14a780 ffff88809b14a000 0000000100000004 0000000000000000 [ 2432.729884][ T5761] page dumped because: kasan: bad access detected [ 2432.736286][ T5761] [ 2432.738604][ T5761] Memory state around the buggy address: [ 2432.744232][ T5761] ffff88809b14a000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2432.752300][ T5761] ffff88809b14a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2432.760357][ T5761] >ffff88809b14a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2432.768405][ T5761] ^ [ 2432.773248][ T5761] ffff88809b14a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2432.778074][ T3876] kobject: 'loop0' (000000006dc69d41): kobject_uevent_env [ 2432.781316][ T5761] ffff88809b14a200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2432.781321][ T5761] ================================================================== [ 2432.781325][ T5761] Disabling lock debugging due to kernel taint [ 2432.781332][ T5761] Kernel panic - not syncing: panic_on_warn set ... [ 2432.781354][ T5761] CPU: 0 PID: 5761 Comm: syz-executor.4 Tainted: G B 5.0.0-rc8-next-20190301 #1 [ 2432.799634][ T3876] kobject: 'loop0' (000000006dc69d41): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2432.804561][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.804565][ T5761] Call Trace: [ 2432.804586][ T5761] dump_stack+0x172/0x1f0 [ 2432.804605][ T5761] panic+0x2cb/0x65c [ 2432.804620][ T5761] ? __warn_printk+0xf3/0xf3 [ 2432.804634][ T5761] ? lock_downgrade+0x880/0x880 [ 2432.804653][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.874062][ T5761] ? trace_hardirqs_off+0x62/0x220 [ 2432.879150][ T5761] ? trace_hardirqs_off+0x59/0x220 [ 2432.884270][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.889634][ T5761] end_report+0x47/0x4f [ 2432.893764][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.899143][ T5761] kasan_report.cold+0xe/0x40 [ 2432.903843][ T5761] ? lockdep_register_key+0x3b9/0x490 [ 2432.909203][ T5761] __asan_report_load8_noabort+0x14/0x20 [ 2432.914833][ T5761] lockdep_register_key+0x3b9/0x490 [ 2432.920114][ T5761] alloc_workqueue+0x427/0xe70 [ 2432.924872][ T5761] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2432.930579][ T5761] ? kmem_cache_alloc_trace+0x354/0x760 [ 2432.936101][ T5761] hci_register_dev+0x1b8/0x860 [ 2432.940928][ T5761] ? __raw_spin_lock_init+0x2d/0x100 [ 2432.946207][ T5761] hci_uart_tty_ioctl+0x766/0xb00 [ 2432.951207][ T5761] tty_ioctl+0xac9/0x14d0 [ 2432.955513][ T5761] ? hci_uart_init_work+0x150/0x150 [ 2432.960684][ T5761] ? tty_register_device+0x40/0x40 [ 2432.965770][ T5761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2432.971987][ T5761] ? tomoyo_init_request_info+0x105/0x1d0 [ 2432.977708][ T5761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2432.983933][ T5761] ? tomoyo_path_number_perm+0x263/0x520 [ 2432.989559][ T5761] ? find_held_lock+0x35/0x130 [ 2432.994308][ T5761] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2433.000101][ T5761] ? __fget+0x35a/0x550 [ 2433.004298][ T5761] ? tty_register_device+0x40/0x40 [ 2433.009392][ T5761] do_vfs_ioctl+0xd6e/0x1390 [ 2433.013956][ T5761] ? ioctl_preallocate+0x210/0x210 [ 2433.019055][ T5761] ? __fget+0x381/0x550 [ 2433.023189][ T5761] ? ksys_dup3+0x3e0/0x3e0 [ 2433.027582][ T5761] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2433.033798][ T5761] ? fput_many+0x12c/0x1a0 [ 2433.038207][ T5761] ? tomoyo_file_ioctl+0x23/0x30 [ 2433.043140][ T5761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2433.049356][ T5761] ? security_file_ioctl+0x93/0xc0 [ 2433.054457][ T5761] ksys_ioctl+0xab/0xd0 [ 2433.058603][ T5761] __x64_sys_ioctl+0x73/0xb0 [ 2433.063173][ T5761] do_syscall_64+0x103/0x610 [ 2433.067752][ T5761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2433.073632][ T5761] RIP: 0033:0x457e29 [ 2433.077500][ T5761] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2433.097091][ T5761] RSP: 002b:00007fd54e20ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2433.105486][ T5761] RAX: ffffffffffffffda RBX: 00007fd54e20ec90 RCX: 0000000000457e29 [ 2433.113447][ T5761] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 2433.121393][ T5761] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2433.129340][ T5761] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd54e20f6d4 [ 2433.137298][ T5761] R13: 00000000004c06b8 R14: 00000000004d23f0 R15: 0000000000000004 [ 2433.146254][ T5761] Kernel Offset: disabled [ 2433.150582][ T5761] Rebooting in 86400 seconds..