06c0)={0x1d, r5}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x35402, 0x0) write$capi20(r7, &(0x7f0000000040)={0x10, 0x8, 0xff, 0x80, 0x84fa, 0x8001}, 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 13:45:31 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:31 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:31 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:31 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r2, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x13, 0x0) ptrace(0x10, r3) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/tcp\x00') r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x13, 0x0) ptrace(0x10, r5) fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x1, 0x3, 0x8, 0x400, r5}) unshare(0x40000000) r6 = accept(r2, 0x0, 0x0) open(0x0, 0x8000, 0x0) write$binfmt_elf64(r6, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x0, 0xfff}], "", [[], [], []]}, 0x378) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) [ 414.557986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.563788][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:45:32 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 414.692114][T10692] IPVS: ftp: loaded support on port[0] = 21 13:45:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) r1 = open(&(0x7f0000002000)='./bus\x00', 0x8406d2538cca1f8d, 0x0) ftruncate(r1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000024) fstatfs(0xffffffffffffffff, &(0x7f00000005c0)=""/163) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) recvmsg$can_bcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001780)=""/161, 0xa1}], 0x7, &(0x7f00000018c0)=""/89, 0x59}, 0x2000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000020292}) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x8001, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sync_file_range(r0, 0x0, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0b01810000004ad4323a6026d43900002c10791c7a3b97baba2cb60b93f7a51924d2ff0c91c93ab40e456e8fb743d937fcb60d36f7976d707839"], 0x1}, 0x1, 0x0, 0x0, 0x4844}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x40000, 0xfff, 0x7fffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9e0906, 0xcdd, [], @value64=0x8}}) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11}]}, 0x1c}}, 0x0) [ 414.878129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 414.883964][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:32 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 414.953756][T10693] IPVS: ftp: loaded support on port[0] = 21 13:45:32 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) 13:45:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) pread64(r1, &(0x7f0000000680)=""/200, 0xc8, 0x4) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x183200) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ff0f26bd7000fcdadf250b00000008000300", @ANYRES32, @ANYBLOB="2b003900090000000a000900ffffffffffff0000050033000200000008000300", @ANYRES32, @ANYBLOB="050035002000000008003cf625202300010000000500c6a9c777000007ea34776e795768133488a68b911c80604fbfb9d11e9338ea96d53ab5f09088bb87da631b69800522c2530ec6934c74f60be4d7ea1657dc9295aef089ae867072e544926bca865529d4df979cf7c4c32509fa4b904dd3303f2f057081be47c18f4657c1ecbb2659af44a7fa56d241dd59dbcfb3bf3a0eae41ace198eacfe74494192df09f91733858fc237f603a5c71cde975ccd90b89d0bfac6e8c9836de553ef70a51017858a56d322eaf3054409b186a7e8b74cd785d36dbee5d424794ff6043bad8c54c6758dc60d5ab308ee08ecbe63180a8cab86a7b0d99589703c36f14361c23e377ad0f3a375c0b1a3cac3a5268f187e3e0f84dcbf487244d4a8a68ba3415327ad34cf4"], 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4048000) unlinkat(r2, &(0x7f00000002c0)='./file0\x00', 0x200) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x68}}, 0x10) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r5, 0x0, 0x7, &(0x7f0000000240)='batadv\x00', 0xffffffffffffffff}, 0x30) mmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x0, 0x10010, r6, 0x1f9f000) 13:45:32 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r2, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x13, 0x0) ptrace(0x10, r3) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/tcp\x00') r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x13, 0x0) ptrace(0x10, r5) fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x1, 0x3, 0x8, 0x400, r5}) unshare(0x40000000) r6 = accept(r2, 0x0, 0x0) open(0x0, 0x8000, 0x0) write$binfmt_elf64(r6, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x0, 0xfff}], "", [[], [], []]}, 0x378) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 13:45:32 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) 13:45:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) r1 = open(&(0x7f0000002000)='./bus\x00', 0x8406d2538cca1f8d, 0x0) ftruncate(r1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000024) fstatfs(0xffffffffffffffff, &(0x7f00000005c0)=""/163) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) recvmsg$can_bcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001780)=""/161, 0xa1}], 0x7, &(0x7f00000018c0)=""/89, 0x59}, 0x2000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000020292}) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x8001, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sync_file_range(r0, 0x0, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0b01810000004ad4323a6026d43900002c10791c7a3b97baba2cb60b93f7a51924d2ff0c91c93ab40e456e8fb743d937fcb60d36f7976d707839"], 0x1}, 0x1, 0x0, 0x0, 0x4844}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x40000, 0xfff, 0x7fffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9e0906, 0xcdd, [], @value64=0x8}}) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11}]}, 0x1c}}, 0x0) [ 415.516798][T10721] IPVS: ftp: loaded support on port[0] = 21 13:45:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(0xffffffffffffffff) r1 = open(&(0x7f0000002000)='./bus\x00', 0x8406d2538cca1f8d, 0x0) ftruncate(r1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000024) fstatfs(0xffffffffffffffff, &(0x7f00000005c0)=""/163) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) recvmsg$can_bcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001780)=""/161, 0xa1}], 0x7, &(0x7f00000018c0)=""/89, 0x59}, 0x2000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000020292}) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x8001, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sync_file_range(r0, 0x0, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0b01810000004ad4323a6026d43900002c10791c7a3b97baba2cb60b93f7a51924d2ff0c91c93ab40e456e8fb743d937fcb60d36f7976d707839"], 0x1}, 0x1, 0x0, 0x0, 0x4844}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x40000, 0xfff, 0x7fffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9e0906, 0xcdd, [], @value64=0x8}}) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11}]}, 0x1c}}, 0x0) 13:45:33 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) [ 415.759439][ T2504] tipc: TX() has been purged, node left! [ 415.765348][ T2504] tipc: TX() has been purged, node left! 13:45:33 executing program 0: ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x10000, 0x10000}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x62002, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt(r1, 0x9, 0xffffffff, &(0x7f00000002c0)="b1f1228b7af96994b2db58fc1ada9809c95aba5cc7ba7f9db206161e76b9ed8c349085e8e6d21117be6178c0143974fbdf43100331fb29c7ccf623ffa76977b68b7ff4b7bf56c8c272e285012697fcdd5719495070c938ee85b43471924a27215ec26e7671d12a4120ec1a12216f760e597fc989ba81964eff4713d5b55493f48d326e202534022a1fba72fdb96fdfc1f0b78d38a97796c7f781683be9ee8ad288e9255caf930e8090f132cc7541d85e2b3398930691aeb9da0b0f65dfaa3e37f3559b4cf5d0eecc300e348c692ba7567af29a3a1ad38fddce55e88f27f32426e0bd2a63d99d", 0xe6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000009500fa0000000000b3d6fbdaef9f7d4e1a5b276570dd9934843e3cfc6b3282d976ef3190ed183edd9f8f456a870ca7555cbc7fd526dbd9e8f3860bf492a8e4afc28ac1f48f4c4bbb43728e1ac1b67474e56a20ddb70311ad550db6bd9f561574901163080600836830e6d293f4d9d1fa470fd23e9c9282eadac0b0dcc2f39ca2f02c19ee61748e1db2740a6b7109dbcb87212b861303286dd6b455d54509792ce29d6f7189ebd9ab73c3c4a780ea140f2e8780d8281d2d6010ac5c2bc3af73954abd5a6616591783410393ec5d28da5fb2689dc07129bf3bca7b35d937221a739396bbf8e00ac47c463a6ec8bad33a89c8c020148e0e9522fe0e4dcdb8a4c2a5dffe42896d2bed45040a513dbf05f30165ec0e879bfd4c3c92c37d697551a80e37c13ee9d77b15e19515c5685d2c77ce89ee99c8ea74f28d8a085db78dab969934ee9b8909ae91b287a39149ef8217baebce4e5108c232858edcabec8e7ab062b1fa81a47463a38fa0f147fda1a8b38ef57b03b85b2582730dfff52d5039d41ef8e253723055c34299079fa387ba400ec9432fa638292892374f87a2805e98f34b179ea01aad9a991d102b6351f8af25183d753e22d94369dec1416b3661632681b0f66b11a3fc18f7967aba0ff9fa901c12ec55d3f5b3c68bd2e507a35a4e43f64bb49d0b6c52fe49308e5ecdb03d5cad40b9999d4eae7176cea5c643815bdf6cfef3562cced066cad487543e6fad13c7e78915e204db795164bc0f1955de204510b49b139503082dafb7a032cde4f95d354d2cfc08f6585f81bbd23be69479e999a2c3683058bcc341271ba1e9540499669c403199a8d7dab9be31db3895249ad9e1f5c14aeab82df3a736673724261e6fae02242ad78e55853ad57f111a5eb2fbcbec000000000000f4075ec972012b606b656938b016222cadc38fa09c20cf211eb0869061f6fe74124995349ccf9d43902db8858de76e6b8392b2f83aa47f057ab29d"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r3, r2, 0xd}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000100)={r3, 0xffffffffffffffff, 0x8000000000d}, 0x10) 13:45:33 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r2, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x13, 0x0) ptrace(0x10, r3) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/tcp\x00') r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x13, 0x0) ptrace(0x10, r5) fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x1, 0x3, 0x8, 0x400, r5}) unshare(0x40000000) r6 = accept(r2, 0x0, 0x0) open(0x0, 0x8000, 0x0) write$binfmt_elf64(r6, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x0, 0xfff}], "", [[], [], []]}, 0x378) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 13:45:33 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 13:45:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000003c0)=""/140}, 0x20) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000100)="1d37504447cee2670270554730620071cf650be9f8f525853dcd5331c68fce8a28f690553a95c18cc0b3", 0x0}, 0x20) 13:45:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r2, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r5, 0x36) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x180000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000400)={r7, r8, 0x153a, 0x4b, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c710452ef0e3d871e2c574ab5df6f2cfcfaf6d453fd78c", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'}) io_submit(0x0, 0x2f6, &(0x7f00000004c0)) r9 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x0, 0x6, @tid=r9}, &(0x7f0000000480)) r10 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) acct(&(0x7f0000000180)='./file0\x00') 13:45:33 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 13:45:33 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 13:45:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1c) r0 = socket(0x10, 0x80002, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000068}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x8, 0xb, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004861}, 0x8000040) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40401e5) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0xc000001, 0xfff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast1, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x5452, &(0x7f0000000100)) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b98a5b0e", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYBLOB="0000000012002edb99"], 0xc, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0x8) bind$rose(r5, &(0x7f0000000600)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r6, 0x73, 0x5}, 0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x248000, 0x0) 13:45:34 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 416.939314][T10764] overlayfs: failed to resolve './file1H': -2 [ 416.965459][T10753] Process accounting resumed 13:45:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r2, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r5, 0x36) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x180000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000400)={r7, r8, 0x153a, 0x4b, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c710452ef0e3d871e2c574ab5df6f2cfcfaf6d453fd78c", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'}) io_submit(0x0, 0x2f6, &(0x7f00000004c0)) r9 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x0, 0x6, @tid=r9}, &(0x7f0000000480)) r10 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) acct(&(0x7f0000000180)='./file0\x00') 13:45:34 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r2, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x13, 0x0) ptrace(0x10, r3) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/tcp\x00') r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x13, 0x0) ptrace(0x10, r5) fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x1, 0x3, 0x8, 0x400, r5}) unshare(0x40000000) r6 = accept(r2, 0x0, 0x0) open(0x0, 0x8000, 0x0) write$binfmt_elf64(r6, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x0, 0xfff}], "", [[], [], []]}, 0x378) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) [ 417.017328][T10764] overlayfs: failed to resolve './file1H': -2 13:45:34 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') accept$unix(r2, 0x0, &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/186) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x3, 0x3, 0x401, 0x0, 0x0, {0xc}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x96fa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0x800) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)={0x971, 0xc, 0x4, 0x4, 0xd2e, {r4, r5/1000+10000}, {0x5, 0x2, 0x20, 0xff, 0x3, 0x1, "292a3b13"}, 0xb868, 0x2, @fd, 0xa7, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x100, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000440)={0x8}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000480)={{0x0, 0x3, 0x2d9, 0x1, 0x5}, 0x8, 0x6}) r8 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0xe8) syz_mount_image$exfat(&(0x7f0000000500)='exfat\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000580)="10aad59addf4110975917c615666ba1250febbe9ab7efe0c86eb4d7ba3e87409e5e701729f5b843e59b1b38db473d42670a245195597f18a3b7716439834ad534929d8205827e6ecd1efd98ae7d4d3b3333babaf576248db5a014b86e8db0506a9e21f8e837d1f19616942497f72bb76458a8893f51f43b80057a8c3552da5b12d9bbcb313712ad74cd345fb28f3a3576016872f98119f795fcbd42d68da5a0b1fe66c05702480c4", 0xa8, 0x7ff}, {&(0x7f0000000640)="1de82156fa2eee30b2673f15a9e44c7ade147d2de6f96e5ea15e1dac6fc90ccc9710d9d0f1a1cb9f58d246f6b2c521dce0e875267eed2c8cc9edffcfa921add4ef84ef0c518cbc4cb0ac354f06c21b220185c1a8acdbaec4fff5683d1bd695c8e0f60415d6ff953181ea570d1ded2b2da77887304e1f41c44cee05", 0x7b, 0x241830d1}], 0x1082ca0, &(0x7f0000000840)={[{@uid={'uid', 0x3d, r8}}, {@errors_continue='errors=continue'}], [{@audit='audit'}, {@euid_eq={'euid', 0x3d, r10}}, {@pcr={'pcr', 0x3d, 0x2b}}, {@obj_role={'obj_role'}}]}) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000900)={0x0, 0xa0, 0x30}, &(0x7f0000000940)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r11, 0x84, 0x79, &(0x7f0000000980)={r12, 0x2, 0x9}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x20081, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000a00)) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000a40)={0x3000, 0x6000, 0xa, 0x20, 0x1f}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000a80)=0x13, 0x4) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000b00)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) r14 = dup3(r6, 0xffffffffffffffff, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40)='nl80211\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0x14) getsockopt$inet_mreqn(r11, 0x0, 0x24, &(0x7f0000000d00)={@loopback, @dev, 0x0}, &(0x7f0000000d40)=0xc) sendmsg$NL80211_CMD_LEAVE_MESH(r14, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r15, 0x100, 0x70bd26, 0x8, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x8080) [ 417.810077][T10773] Process accounting resumed [ 418.678359][ T2504] tipc: TX() has been purged, node left! [ 418.718018][ C0] net_ratelimit: 20 callbacks suppressed [ 418.718028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.729776][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 419.037998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.043807][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 419.049615][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.055369][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 419.598000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.604340][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 419.837990][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.843832][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:37 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0xc6180, 0x0) getpeername(r0, &(0x7f0000000180)=@hci, &(0x7f0000000200)=0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000100)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd02090000b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@discard='discard'}]}) 13:45:37 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x20000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000240)={0x18, 0x1, 0x0, {0x7a}}, 0x18) r7 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x42b, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@IFLA_LINKINFO={0x28, 0x12, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x1c, 0x2, [{{0x8, 0x1, r7}, {0x8, 0x2, r4}, [@IFLA_GTP_FD1={0x8, 0x2, r3}]}]}}}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:45:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r2, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r5, 0x36) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x180000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000400)={r7, r8, 0x153a, 0x4b, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c710452ef0e3d871e2c574ab5df6f2cfcfaf6d453fd78c", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'}) io_submit(0x0, 0x2f6, &(0x7f00000004c0)) r9 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x0, 0x6, @tid=r9}, &(0x7f0000000480)) r10 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) acct(&(0x7f0000000180)='./file0\x00') 13:45:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) unlink(&(0x7f0000000100)='./bus/file0\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008400000002000000000001", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x13, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000340)={0x3}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) accept4(r2, &(0x7f00000001c0)=@generic, &(0x7f00000002c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) 13:45:37 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7b1, 0x500) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 420.488123][T10808] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem 13:45:37 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 420.588070][T10808] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 13:45:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 13:45:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) dup2(r2, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r5, 0x36) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x180000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000400)={r7, r8, 0x153a, 0x4b, &(0x7f0000000380)="e566a2a5d5b7b3a9fe7c5af247c90b0dd5516209501f8a03d472234df30e207b7ec7a25dc4caa9e2720c9544dbec1aeb871bcd95c710452ef0e3d871e2c574ab5df6f2cfcfaf6d453fd78c", 0x81, 0x1f, 0x1, 0x0, 0x1, 0x3, 0x0, 'syz0\x00'}) io_submit(0x0, 0x2f6, &(0x7f00000004c0)) r9 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x0, 0x6, @tid=r9}, &(0x7f0000000480)) r10 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) acct(&(0x7f0000000180)='./file0\x00') [ 420.766225][T10820] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 420.767071][T10804] Process accounting resumed 13:45:38 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 420.931679][T10820] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 13:45:38 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x4, 0x9, 0x4, 0x400, 0x7, {}, {0x5, 0x8, 0x1f, 0x5, 0x7, 0x4, "53bdc3b5"}, 0x9323, 0x4, @fd, 0x1}) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x1, &(0x7f0000000080)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x6, r3, 0x1}) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup2(r5, r5) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @bcast}, [@default, @rose, @remote, @netrom, @remote, @netrom, @netrom, @rose]}, &(0x7f00000002c0)=0x48) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 13:45:38 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x3, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed024c0a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001ff0ffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0) 13:45:39 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 421.684565][T10848] Process accounting resumed 13:45:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept(r3, &(0x7f0000002480)=@nfc, &(0x7f0000002500)=0x80) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000025c0)={@nl=@kern={0x10, 0x0, 0x0, 0x400}, {&(0x7f0000002540)}, &(0x7f0000002580), 0x28}, 0xa0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @start={0x80000001}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r7, 0x0) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 421.708494][T10851] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop1 scanned by syz-executor.1 (10851) 13:45:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 421.766497][T10851] BTRFS error (device loop1): superblock checksum mismatch [ 421.804814][T10829] Process accounting resumed 13:45:39 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0), 0x4) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0xc6, 0x0, 0x10000, 0x80}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000480)={0x100, r3}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x400, 0x100}}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000003c0)=r6) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000740)={0x2, &(0x7f0000000500)=""/129, &(0x7f0000000700)=[{0x6, 0x59, 0x8, &(0x7f00000005c0)=""/89}, {0x7, 0xb5, 0x4, &(0x7f0000000640)=""/181}]}) shutdown(r7, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x0, 0x800, 0x7, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x664e}, &(0x7f0000000340)=0x8) [ 421.818007][T10851] BTRFS error (device loop1): open_ctree failed [ 421.933371][T10859] BTRFS error (device loop1): superblock checksum mismatch [ 422.018007][T10859] BTRFS error (device loop1): open_ctree failed 13:45:39 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:39 executing program 1: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x301000, 0x34) open(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x800) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000180)=0x1ff) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) geteuid() fstat(0xffffffffffffffff, 0x0) getuid() gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0x10000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x125) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000140)={0x9c, 0x0, 0x4, 0x0, 0x1f, 0x96}) ftruncate(r5, 0x200004) openat$dsp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100), 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d0) 13:45:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept(r3, &(0x7f0000002480)=@nfc, &(0x7f0000002500)=0x80) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000025c0)={@nl=@kern={0x10, 0x0, 0x0, 0x400}, {&(0x7f0000002540)}, &(0x7f0000002580), 0x28}, 0xa0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @start={0x80000001}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r7, 0x0) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 13:45:39 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:40 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 422.819383][ T27] audit: type=1800 audit(1579441540.148:57): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16593 res=0 13:45:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x5, 0x800000003, 0x81) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080004"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:45:40 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0), 0x4) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0xc6, 0x0, 0x10000, 0x80}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000480)={0x100, r3}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x400, 0x100}}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000003c0)=r6) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000740)={0x2, &(0x7f0000000500)=""/129, &(0x7f0000000700)=[{0x6, 0x59, 0x8, &(0x7f00000005c0)=""/89}, {0x7, 0xb5, 0x4, &(0x7f0000000640)=""/181}]}) shutdown(r7, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x0, 0x800, 0x7, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x664e}, &(0x7f0000000340)=0x8) 13:45:40 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0), 0x4) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0xc6, 0x0, 0x10000, 0x80}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000480)={0x100, r3}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x400, 0x100}}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000003c0)=r6) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000740)={0x2, &(0x7f0000000500)=""/129, &(0x7f0000000700)=[{0x6, 0x59, 0x8, &(0x7f00000005c0)=""/89}, {0x7, 0xb5, 0x4, &(0x7f0000000640)=""/181}]}) shutdown(r7, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x0, 0x800, 0x7, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r8, 0x664e}, &(0x7f0000000340)=0x8) 13:45:40 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380)}}], 0x2, 0x0) 13:45:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 423.242149][T10869] Process accounting resumed 13:45:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x3f, 0x4) 13:45:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_dellink={0x2c, 0x11, 0x0, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x400, 0x8000}, [@IFLA_BROADCAST={0xa, 0x2, @random="80670ae15c36"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000006491bdad00"/64], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x186d3d3b29695227, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:45:40 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380)}}], 0x2, 0x0) 13:45:40 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380)}}], 0x2, 0x0) 13:45:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet(0x2, 0x3, 0x20000000084) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001300)='hybla\x00', 0xfffffffffffffea2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) prctl$PR_GET_TSC(0x19, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) recvmmsg(r2, &(0x7f00000048c0)=[{{&(0x7f0000000f00)=@alg, 0x80, &(0x7f0000001100)}}, {{&(0x7f0000001140)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000001240)=""/185, 0xb9}, 0x2}], 0x2, 0x2000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7115}, 0x40000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000140)={0x2a, "97a169472faadbb194e09446de70023d9aea81c3957cf088c24245ca1bc26915fed4a96129235bcf902cde547ce2ab3ab3f6c3378105252f72659fe8a4709380d940e700f6d3b80d6707c4c9047e45c230ed8ec5da831c6774fb227eedc71aeb84a24ee12097a19635e0827b780533cf74019854ac5989750dc6225a1ab081c9"}) [ 423.758002][ C1] net_ratelimit: 20 callbacks suppressed [ 423.758013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.769510][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:41 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', r1}, 0x10) mount$9p_unix(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=unix,'}) 13:45:41 executing program 4: stat(0x0, &(0x7f00000001c0)) getegid() socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) recvmsg$can_j1939(r0, &(0x7f0000000740)={&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1, &(0x7f0000000680)=""/160, 0xa0}, 0x20) fstat(r1, &(0x7f0000000440)) readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/204, 0xcc) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3e3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) clock_gettime(0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x0) unshare(0x60020000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0xffffffffffffff7f, 0x0, 0x2, 0x3}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000040)={0x7f, r3, 0x0, 0x1f}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000240)={r5, 0x2}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000140)=0x6) 13:45:41 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x1, 0x0) 13:45:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08ffff00", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) r2 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r4 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="0d5895d9", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r3, @ANYBLOB="040002000000000008000500", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="080003", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x21, 0x0) [ 424.002077][T10939] IPVS: ftp: loaded support on port[0] = 21 [ 424.008052][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.008080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 424.008112][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.027835][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000000020100000000000000000000000000040003ff7f000000000000000400020004000100fda309ce2ea5af2a129b08f48e080c892d6f3e6f5c0089"], 0x28}}, 0x0) [ 424.225030][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 13:45:41 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x1, 0x0) [ 424.342798][T10954] overlayfs: conflicting lowerdir path [ 424.393958][T10954] overlayfs: workdir and upperdir must reside under the same mount [ 424.548767][ T8050] tipc: TX() has been purged, node left! [ 424.666967][T10912] Process accounting resumed 13:45:42 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendto$inet(r0, 0x0, 0xd1, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x0, 0x9, 0x1, 0x18}, {0x7, 0x81, 0x6, 0x5}, {0x73f, 0x69, 0x7, 0x1000}]}, 0x10) r1 = dup2(r0, r0) getpid() lstat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) sendmsg$tipc(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 13:45:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090023000802060000001900154004000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r2 = getpid() r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1a1000, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x190, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xed, 0xd, 0x1, 0x0, "b363ce83579a68578a6c7f5005f32d85b20fea747f95bb8ab472dfdff29e66f13018743a1151b0555a6fc9b37ebb94c1982609311699dff0e22a5994ce3f4d063cc3f655bda68a53055d0c2f183980511e003070c5e83c0108960a2d7a120ffea803f1749a479f5c7776a3d408b8c8c980f28dba189e0a5e09a60948d6cfb666ffe4bcd327b2725598774e1d2099bae7d9e8c0b04c047d55a75ab9830196819f5589cfb7e603042f3b96c67c2e1517458e4ff5f54dd3f56cd8653f353c3ab2e5210700114ece5d3a7c44135e786887f8b3a27fb66735a454107edf7de07dd2d7395986b4b90b98dd41"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xda}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0x58, 0xd, 0x1, 0x0, "13577b3acadd568d4c457db46ff99f1a1ba9212539b51321d6a4de8b4d33d8f879f109c48cce0b6ade3fa556e973038e253134590d2d5ef42d62aac6cb502c4cde2d58852b0498c55379b26ba71428372786e813"}, @NFTA_SET_USERDATA={0xf, 0xd, 0x1, 0x0, "6957d99489f3364b9ee625"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb1}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x850) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={r2, r4, r5}, 0xc) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x492492492492596, 0x0) 13:45:42 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x55}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x6, 0x80000001, 0x6, 0x10000, 0x6, "6e73034ec18a2bf890ec9dcd3946f058d5f0f8"}) rmdir(&(0x7f0000000000)='./file0\x00') r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x41041, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f0000000080)="d3cc4c9299673697a6dfd6a0d37f9d23be0a7422d48d416fa060747c3163202f328b29246b879e818780e90720c4e3d2a01ec8680d772b0b125f215663fef44114038c374357017ef79c56cfe864ddaf3c743b104df1356d7a7b2f90e9327d388ac12a2431ddc365ad56087e84b010e78d0fee2d6b8a7e4b37c0fb82222ce1bc16e3d9dc5a9f9dc4fa7a5c76126f820f9f0646ab6e15a6ddb660739ad2330c0fc966b6a57493"}, 0x20) dup2(r0, r5) 13:45:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08ffff00", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) r2 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r4 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="0d5895d9", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r3, @ANYBLOB="040002000000000008000500", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="080003", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x21, 0x0) 13:45:42 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x1, 0x0) 13:45:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) r5 = accept4$bt_l2cap(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80800) write$binfmt_misc(r5, &(0x7f0000000240)={'syz1', "939215c4da5504fa2e82d28a0f03b052f7ed76f32becee71c2e1bc79b82825f75afcc7d2279426a961895f5d2d959de29b9f73e75da11001e4e65166fa67e6c00e853b4eac7b1d37eda08c20e00346dd5a4878c6a16e44aa8895132097622181b1d96e9563f2de1860eefdab91c95549c15e28a5125a347cc306cce8c90606804e91aaf6be09d4765f3ac6540f342e7062684646a2342f1c79e4ba1bab03550f0d478496315d3bce6f354f09db310bb5d5438b546e89aee656dbc861b0e9a2f32b37032d393fd557a32735ee0bd27c45789854dc19b2ebc68bb4e94fa695d6"}, 0xe3) clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x1, 0x0, [0x800, 0xc7c, 0x8, 0x5, 0x6, 0xc1]}) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x50000000000443) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 424.958434][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.964243][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:45:42 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 425.279350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 425.285509][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:42 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r6 = dup2(r5, r4) r7 = socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') bind$rxrpc(r7, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ptmx\x00', 0x572ee3215d6e2cb4, 0x0) preadv(r5, &(0x7f0000000d00)=[{&(0x7f0000001080)=""/166}, {&(0x7f0000001140)=""/83}, {&(0x7f00000011c0)=""/167}], 0xa, 0xfffffffffd0b8c85) listen(r7, 0x9) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={r8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) get_thread_area(&(0x7f0000000080)={0x9d5, 0x20000800, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r9 = inotify_init1(0x0) r10 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x169, 0x2) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x1}, 0x1c) setsockopt$inet6_int(r11, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r11, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f0000000cc0)={0x7, '\x00', {0x6}, 0x4}) fallocate(r10, 0x0, 0x0, 0x1000f4) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, &(0x7f0000000400)={0x80000000, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @local}}}, 0x108) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000100)={0x0, 0x0}) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r13, 0x401054d6, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r12, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 13:45:42 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc0506107, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=""/140, 0x8c}, {&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/187, 0xbb}], 0x3, 0x7f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x2b0, 0x0, 0x0, 0x160, 0x160, 0x160, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4ba3a94a2d2393e3182f64694d7d05fb478c8f56627a5cf905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x39}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x310) 13:45:43 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffeac, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="fffff0000000000024001200090001007866726d0000000014000200080001000200000008000200010000000a000300040000000000000008000a00", @ANYRES32, @ANYBLOB="416ec80095a73b54b7d167d0a23ed8bde577788549c2a9bdbbc875ba96db16d83e5f008333c3e57854b7d89046c3c1eeca60929487733bd1d5f040836fe4305ee4c4c7b13bb40e85ea4d49c175f582d638a263aacb625f0b20b2fecdf3ecdf3c729515"], 0x58}}, 0x0) [ 425.941818][T11000] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 426.096997][T11011] device  entered promiscuous mode 13:45:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendto$inet(r0, 0x0, 0xd1, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x0, 0x9, 0x1, 0x18}, {0x7, 0x81, 0x6, 0x5}, {0x73f, 0x69, 0x7, 0x1000}]}, 0x10) r1 = dup2(r0, r0) getpid() lstat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) sendmsg$tipc(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 13:45:43 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendto$inet(r0, 0x0, 0xd1, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x0, 0x9, 0x1, 0x18}, {0x7, 0x81, 0x6, 0x5}, {0x73f, 0x69, 0x7, 0x1000}]}, 0x10) r1 = dup2(r0, r0) getpid() lstat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) sendmsg$tipc(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 13:45:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) r2 = epoll_create(0xab7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x46203, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r5, 0x29, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x254, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4bb01914}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x100, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8be3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18cf32ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x737b9389}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x801}, 0x48050) creat(&(0x7f0000000000)='./file0\x00', 0x1d0) dup3(r1, r0, 0x0) 13:45:43 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r6 = dup2(r5, r4) r7 = socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') bind$rxrpc(r7, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ptmx\x00', 0x572ee3215d6e2cb4, 0x0) preadv(r5, &(0x7f0000000d00)=[{&(0x7f0000001080)=""/166}, {&(0x7f0000001140)=""/83}, {&(0x7f00000011c0)=""/167}], 0xa, 0xfffffffffd0b8c85) listen(r7, 0x9) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={r8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) get_thread_area(&(0x7f0000000080)={0x9d5, 0x20000800, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r9 = inotify_init1(0x0) r10 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x169, 0x2) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x1}, 0x1c) setsockopt$inet6_int(r11, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r11, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f0000000cc0)={0x7, '\x00', {0x6}, 0x4}) fallocate(r10, 0x0, 0x0, 0x1000f4) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, &(0x7f0000000400)={0x80000000, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @local}}}, 0x108) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000100)={0x0, 0x0}) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r13, 0x401054d6, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r12, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 426.156189][T11014] ptrace attach of "/root/syz-executor.0"[8027] was attempted by " àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ Õ\x09  @ ] !    \x0a    /dev/dlm_plock p     TIPCv2 \x0a N À@    \x0d /dev/midi# @ [ 426.410363][T11025] device  entered promiscuous mode 13:45:44 executing program 5 (fault-call:3 fault-nth:0): symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 427.116264][T11032] ptrace attach of "/root/syz-executor.0"[8027] was attempted by " àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ Õ\x09  @ ] !    \x0a    /dev/dlm_plock p     TIPCv2 \x0a N À@     /dev/midi# @ [ 427.191433][T11022] tipc: Failed to obtain node identity [ 427.204848][T11036] FAULT_INJECTION: forcing a failure. [ 427.204848][T11036] name failslab, interval 1, probability 0, space 0, times 1 13:45:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000000061100800000000002d000000000000009500000000000000fd52065010876c24531b2f8b8b0c522d00675d5c06d6fed1d6baddf12e1856b76cdef885c32baf9a8eaa107c0040af536314058bf13732ac45b6995acdf8dd659704d5ed38fea523"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x5, 0x8, 0x8, 0x10001}]}) fcntl$setstatus(r0, 0x4, 0x42000) lstat(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = semget(0x2, 0x3, 0x0) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f00000002c0)=""/128) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) [ 427.421255][T11036] CPU: 0 PID: 11036 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 427.429972][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.440118][T11036] Call Trace: [ 427.443414][T11036] dump_stack+0x11d/0x181 [ 427.447901][T11036] should_fail.cold+0xa/0x1a [ 427.452517][T11036] __should_failslab+0xee/0x130 [ 427.457462][T11036] should_failslab+0x9/0x14 [ 427.462047][T11036] kmem_cache_alloc_node+0x39/0x660 [ 427.467267][T11036] ? __rcu_read_unlock+0x66/0x3d0 [ 427.472315][T11036] __alloc_skb+0x8e/0x360 [ 427.476729][T11036] ? ima_match_policy+0x569/0x960 [ 427.481924][T11036] alloc_skb_with_frags+0x8c/0x3d0 [ 427.487133][T11036] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 427.493193][T11036] sock_alloc_send_pskb+0x4f5/0x530 [ 427.498483][T11036] ? preempt_count_add+0x6f/0xb0 [ 427.503436][T11036] ? _raw_spin_unlock+0x4b/0x60 [ 427.508462][T11036] unix_dgram_sendmsg+0x2a9/0xdc0 [ 427.513519][T11036] ? unix_stream_sendpage+0x8f0/0x8f0 [ 427.518965][T11036] sock_sendmsg+0x9f/0xc0 [ 427.523360][T11036] ____sys_sendmsg+0x212/0x4d0 [ 427.528154][T11036] ___sys_sendmsg+0xb5/0x100 [ 427.532764][T11036] ? __fget+0xb8/0x1d0 [ 427.536846][T11036] ? __fget_light+0xaf/0x190 [ 427.541439][T11036] ? __fdget+0x2c/0x40 [ 427.545545][T11036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.552585][T11036] __sys_sendmmsg+0x123/0x350 [ 427.557413][T11036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.563860][T11036] ? fput_many+0xec/0x130 [ 427.568345][T11036] ? fput+0x29/0x30 [ 427.572161][T11036] ? ksys_write+0x145/0x1b0 [ 427.576770][T11036] __x64_sys_sendmmsg+0x64/0x80 [ 427.581621][T11036] do_syscall_64+0xcc/0x3a0 [ 427.586139][T11036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.592037][T11036] RIP: 0033:0x45b159 [ 427.595987][T11036] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.615839][T11036] RSP: 002b:00007fc7b5f3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 427.624413][T11036] RAX: ffffffffffffffda RBX: 00007fc7b5f3d6d4 RCX: 000000000045b159 [ 427.632568][T11036] RDX: 0000000000000002 RSI: 0000000020008600 RDI: 0000000000000004 [ 427.640541][T11036] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 427.648533][T11036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 427.656518][T11036] R13: 00000000000008a5 R14: 00000000004c9da2 R15: 0000000000000000 [ 427.668442][T11022] tipc: Enabling of bearer rejected, failed to enable media 13:45:45 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r6 = dup2(r5, r4) r7 = socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') bind$rxrpc(r7, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ptmx\x00', 0x572ee3215d6e2cb4, 0x0) preadv(r5, &(0x7f0000000d00)=[{&(0x7f0000001080)=""/166}, {&(0x7f0000001140)=""/83}, {&(0x7f00000011c0)=""/167}], 0xa, 0xfffffffffd0b8c85) listen(r7, 0x9) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={r8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) get_thread_area(&(0x7f0000000080)={0x9d5, 0x20000800, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r9 = inotify_init1(0x0) r10 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x169, 0x2) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x1}, 0x1c) setsockopt$inet6_int(r11, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r11, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f0000000cc0)={0x7, '\x00', {0x6}, 0x4}) fallocate(r10, 0x0, 0x0, 0x1000f4) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, &(0x7f0000000400)={0x80000000, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @local}}}, 0x108) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000100)={0x0, 0x0}) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r13, 0x401054d6, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r12, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 13:45:45 executing program 5 (fault-call:3 fault-nth:1): symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:45 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff313}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x400) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000200)={0x1, 0x9, 0xd15f}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000280)={0xd, 0x7f}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000002c0)=""/102, &(0x7f0000000340)=0x66) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000380)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000400)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x581800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000480)={0x6, 0x6, 0x1, 'queue1\x00', 0x496}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x24001, 0x0) read$snddsp(r7, &(0x7f0000000580)=""/4096, 0x1000) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r8, 0x5606, 0x3) pipe2(&(0x7f0000001580)={0xffffffffffffffff}, 0x800) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f00000015c0)=0xd1) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0xfffffffffffffffc) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001600)='/dev/sequencer\x00', 0x200000, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'batadv_slave_1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x54, r11, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xd}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0xd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004) r13 = accept4$tipc(r2, 0x0, &(0x7f0000002c80), 0x80000) r14 = openat$dir(0xffffffffffffff9c, &(0x7f0000002cc0)='./file0\x00', 0x6c00, 0x4) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002d00), 0x4) r16 = syz_open_dev$cec(&(0x7f0000002d40)='/dev/cec#\x00', 0x0, 0x2) sendmsg$unix(r9, &(0x7f0000002e00)={&(0x7f0000001800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000001880)="637ec7a15b1d4ae192c76dc3f01e1d24ed10ca336b70d3998555bbcf803c37116a90ec034fdc957e03c80ecaa09ebd6e2364bca400f86f809cc49050843ad52cd240d0ca534997c04ada4bea0e6fd906e03a6103392724ddb2b0f8de2fe66fb19d97c0995ce9b56d04f34f7fa6403c181ab4b6bdccd87834836bde77a65412687685e224ca2f0ab630e2229da13a2d2b5fc14375", 0x94}, {&(0x7f0000001940)="6a5cc9c55d96e17fb0bf3d3c842ad7f9cf976b42a3978ec1a922bd0d234fe24c88e688a2197961273e625a9be1b119ed0416bb077926c22926785b971cc032a4ebc4e0b1f54abe929069d0ccf15fdb43864c5805f8ccab34c5a50d45a3ffcd1d6167eb6ab95b6248d05447feda10c84cf701e56d870fdc2f1a4d931a999cb286f6874ea839fb0835516d2f0beb6448e2028b345f269f337247c77323f3433fd74fb65e871f80795ab479dd34e63dfd6343ae18c93865e5cf", 0xb8}, {&(0x7f0000001a00)="a614f09ce8422786eb69e0621db705cd5b3238ce35229e15e508cc5831bd15151aea88ed4e52247c6358a54025", 0x2d}, {&(0x7f0000001a40)="9e01a67c9dd9ed3db08105d9ade40b05a5fa37468fcf3eceda61cbacbc00193efc6223d2ef7b5ad105aeeb7f7e8183a777ed006a0fcf83657e2227999b0227759e575eb46aeab81f00a46241859c7f90685c0b5c7632480d4663a0dafba960563de3f229722752a3e87b95af23bb7097c8b99d576b1c9915bdfa67d1b95f33a8b1c946deac394d546ed3d6f5d3875c788c85b02341fa6009494024fc828ee94dce52cdb396f22988f55371eba9a94dc9566f39983d0250928e2fe6c887570d6c86b803511d8b2f2a11619e9a0d2b01103b11d6da37ee6d342a82003c7a32f99ccf02313b7e7a0a9449dc87fd870bc7d001c7a30b68ba7759e4654504699b4e021969c71d6c521a324604f763ae49ee21709ffa16fc399d7d8e35bcdb058024dbd0f844cf07daaa8ab9e9d0a5b29d3a7b41358a48afa22c52af35955b301b184441d3d6b5d714c2d2e4256263b2b6b7de326b30d7e8ee569696a7f875aafc2161b4338b1612a6156baae79dcd055a6ba3ccc626aa93cef018007e5c155fe2f8ac1cf29097260388dcb85588297bdc1c40cb01ab936793c2ef6de834fe3335e1f8593d9e9e2858b567836f024e22fbe9806a8f85719e5bd3da7e4011037c137a19bab64a7d1f895b568a5adb1b8e2d655210858621b284769ae36cc4e66b6172ffea4bda22d238d3dabb395f3056c7c613366cb5b73105c9b2ce45e4bd4ff43ad2bc650f850ef4eed77f8498b74c300e72f55da89f6d22b0a251c77e511728272208ae9c5d59ab5166b6f31b8b56dbadcbf0c0952c112e6195f3994cee5cb86b96ad7a04bf6a4db7115b7c8dc6194631322ec9c12508fc90262a8a6588ee178355dfd9e7cdb0d62c06179c80a65ab501c65cec791be65174f0cc76935ace1f986706f0981525eea0f5c7ecfeda96e38a6f991c5da066a96806fee0ee242ca351bb9729b5167e1fb2c294d02ab99ab2c54954659a14d07165fccb2449fef7825227645cb9f898f1febb5514ef34bfecaa42d2580db599b99f1850f22c947ac1d5171c5764325affd9e56dba61976ec7dafe859b6f1c1c32421d1be036e2be40149566031f4baa5a8ebe053f318e679cbd9041f6fe4c885e867c06664c200e599c942bf9aec62a9d4cc204f0628b7c18386234de88d44bc6df7be9b72f95be4f777dcd22fc13a71bc3ab717b97d3f923896c5d50856d79e2a79b76a081f66267494a9cf6e72d77222fd72a22ed14d1dc39f3f4d9efe4064d53ba3cd37786267e91d1bfa1bb80f690db2dd99d1c46f8089bda9d903848b752414f2a5d482ff6af27cb4370d235b4287c4d2b6143a0dbe3818426c8019e05d4b5486a8d45d4b5bb147a7de07cacbae5dc10e468f24f5863261eee8a074dc68909ff3ab22a4f16b799c73563ef33b82196576dd91ca7709701a118c7ebcbc61def46cda2b895cd4fbf333c23399774d29ac68c1d2e59dda8c17e25eb75bda77e350cff1643ada1e1b578478b731ed6e3b411d7e281da4d74acad1ab11a614ba137302ec8d7cdedef1822ad0e015b0c1fa19bb548e7865c8463aee982da2e1870ce92f15638e6c733f646d16cd6946168ba261f0f57cd2670d93ea74595555028c5809ea873053cf8fe41a19137488f57b40aad575fcd61d44a829254cdcdaf5826cfc7258c78ff639e4854a14fa3966e639dcbb823617627e156950595da31454ea6d791e931b85e39605d0e95b17531dbcde4ea339f89b7827167f6fc62fe2fd6a98778c3c06ff1ca2c0e86a02d3c677ed1ec398dc033a12733e4920356dd212894375cfe484ac25299cacdde69eb78e08316f75b524893991499d6380908dacf65ead61c26db2fd026dbdee30eaea63a8b21ef4b029a4c2488d054410cd775fc05040476fb9b238bc8057fe475612487a4eb90604594c7ed9ebd1c2b1e8d4f3cbc7bec2aa6c7711acab109ce8589a72fd3d222e5a08385c4373cd0b85ef3e8e4c08c6b2f6626c3050437560bc0f29deaca710134f01e745a32202a65820f6fd39dc1dded1d1dd95218a48f6875e87303984a5ef9869b89cffb99da0ec9863d0ada3d4cae85c9bf727e4d7c320dfd601d79c9c5a6bb0ef1522e3a4df29bffc9eb18a15c715a1e1a8941122277f3f2d95daf47a3bfbbc90acc67bd47cf577f7db6a92e3468846f5a6c6ba3b6c8b87e596e53f57bfcd92ccb477961cb6ce33ea1c14a105ccc110e5d0e16f51583f3efe5ebb3cedd257489014ebeb0e22baa97b8a6743e4b3f61ba331359ebc088fa2e6dcc6adf20abe7929dc4a390f04baa92506b5546a3252d9554fb29c1f7b4a0f12815c9daaa45084e88f03fb627c67604beb42eea15cf878139fe0bc3afee8e41a7fabca30d467ddad37020b652b7576229cd199348ce22df37970841228572a2b00b89e6a96349a280873c9a7fbd81e6b706f4ee8345c1b992cfa1686f6e7031406329e99519d4f6a2fd1ac3e2d18336c3e1bc223ccae3b40c33f4bf729582f3b3d3996f0029d22e699c1c96e0ef274b19a825d5d41cbe1f675220090ceb65c6e21b82615296deac51b101703991f9fdcd0045e5dfadb538652ca487f77de1141a6ea63444fc55c991ce750df1778123c58f732b929d9566542e5c4451106811158992adcb0c7203e266f7ecee16661b560204c6dd69f6aae5378f716e5a362372d4824da2f66ec12f699400fa00bd7ac08d009ff6d020371fafcb1e9a35741c3e4ad51e35186ad4a5c1cf6005bcc6033dadfec01909e2a0669b759f9ac7187ce9ceb8a9f38d63e9cdd555256d4013c1de6c8775104f2abbbc4b394569054628158bd816d423c8467eca0c7220cd61591601f09519fc4098fca73570cfa3c320218d52bd562de9580f3f531f25f4a5f1c75094765c1e47ac808141abfe55d89b4eb1f383ce5ab748ee63ecfb18d572a3d1bc58ce10d85f9d1ecffe7ea3478e5a1a46c90b8c9bbba68b9367f279937caa00321002a69e1a7052d3e09785e46a5b8075d716ea4e669f32bceba414a98fe6c8bfb8c7164f7ccc704d0aaeb4a795c089aaf880c3b795c2f15e985bdd5198d7e4bce5df19b405cbcf465eaa84edf0a266735cddc56a5a2285dd60ae4a44cc2dc3b388205d97d39de7ffac8fe8ffea34d0a78c1e6c019c7f65092b66eb445a68e73f145ccf2123b8e5f7974cda0d323bd7a74631ba199eb3abfc01600bdf0904dc4475eee65ca50145898ebb60af0f0953d2a4fedb96d713091c5d88272605edee3a209b8b790d20f0178176a5989755fc50363dd9a6c0c833bd1bc1687f3b8fa143a077c98f144a1790cb5c698907b207faa6eee8e4cf029b3993e150267d513cd66806d66f4fc8da7f53d987fb862f7d99a2112c79cd830d6e6ac087ac308304a54bab32a86dcef252c6f8907a6f72014a210b5ef4fbcd7d71be433faea463c0cf90d82e78effaef96e58fd8be66b3468af129db6f7d9699445350210510b632d99eee7a5ad1af51e222b1beb256e2b75561542dcf9ab504dfeb9ba64e1b4137d56e6a8763ab81b6f47a99c02167cc3d6a8cb7523de2522179f8914d9788f2c9d7473c02db50bd62761a9b9580fc474fb262ab0650304bc214ea937727b34cb75193be07bd373daf7fbcf84f40a2efbba7e41429ef63daf5453defb7b85a75c283c5478d04617c136d0285c6aea8511b7959749b91d692142302ec29cbe21db3f78fbfeb297dcbaad1a9628413469fdf8e94bf34bfc75e082e9f79ce2ded4d7f1210ff2f73254e054e1968165f477e34f7291a05eaf15b32de4ddece021d412e5a1931e3bd921a9d7cf0618bce08bfa98ada1c73e91f7b8d56885f22546967e5578d97c8f6dfd06a79dcd9358c61912b09f0883ce1fa036b3c87365a4d981fa16f1d77a4a99c0a030e8ea0423c0ea4ec2f5531211d269ce04f4f58eb59f94c892249a56c5809b29880247c7f3e3aee6625b40da75cfed69ac22564df62aebffad7d2c043daee184b6fa4d293625b84f44370ffbfa43d9c46dae5a83ca9a98a2ed003b3354ca748d28c9217fce9f4311d08b580602bb80c7914cd0e65cfb38496916840d040931c1ca2df639c38d435ef57f66b56c23c86e80859d1898a0135d9002a1f3841dfb7768aa444116582ea9eb650eaa5f03c590b200f82e852efe8c1d56ef2a9193509ecfd3ab767d5b5243bd5480116b2c02e53305d4087082044961291b08bc3b2f9fae12f0f5ba984e6018868b910957aec3ed43a63856510653777b52231a9b0ec55313518b0cabf9969c27a7c6c9f761a7cc152cd4ee79fcf747c0783aa11171532c5df2817520c3fd67b4c2414eaefa2f6ecd1468290f46cc705132f67780b4fb9bc74e417364465155b2c008fde8ff2f7360b4b21aea4935a62adf8636b26f391c174a5c9a376e6f5bb8856f1189fc9c2ca1ee0af85dcbd096545b75bb1e81b8393af638f61160236f93c6f91008c56300636578a4f858c878316fe288effeb05a500a9112c7abddcbd14530e9b1cd5fdb47a5bfd6bdb446e64fdddee076c4fc60da6d53090a30a621b490a8480ac492cefea648249f2681ccb94332a937d6afffc93e154cea8ffd32ad1c5705321bb279a5afe3d48f704f91187982d36e37f3b583d50c3cde4455c6091ba0d2305e2cba310031ace0beef382f45e39feba14966d22dd9b57a7495a4f987b6dc98ca56cba25017d80b9f2966413141af4ba591cd3c607d2e3212076b78d5010617c778c40f2ce32af55e6d433d3d0a92ce8930085d74e87305390c2af94cf1689080643e11960ffc2efff093e60f4aefaca3849e6469e1ee97342e3bd72ed14598783dea9f88fc53d2111da09b97f497f18d7c6d5d9c9bae6d47acff883d5a2662b46c6ea4d3c53bab6a98edf714a9fb5e3ee6290cc7644f19df94d23e45e08a714e664941c0ba5e4153a9bca5c1a4b179cc8ec0c52869d577fe2c01236ebf66719667259ce1c6c55038100fd4a09074f0b9846ccde6b63bf3395ba49fb2d886a8fef9f4bda25a3b2b6a61acb533bd4432cf1e0065b77d9cff246c33c840a10fa2d0d45f3adaae6bc9c3d5beb00243e20c387879bca80ab0167bb7aff1d23aa94e0f92d57374c6de24859972bdabff9c04ed1a9c159a398f149bfa94faf3f7020466554535326352700c70cca333ee02d9e3acb220931b20b02c67a566375de9e9dc1241b2cc82e13563b47f7ecda6620a9403f528d0fc60aa2376d0709485dd972100ed120fb775e792edc7df1e641c85abc083a9017e0c9a1ac64163662623e7fa6b880707bfc21afa65e92db400ff1c2987914f8ab6dbbe74b33d839ed1bd76dcdce2263ddd623e40665d6115f79f5531e0b7203df49e613e03f155059a52325094dc027dbd73e04a1f9b826ea35f5ba56fd46200bb647bc18c163d6d7bb808c58e0ca6bdec1cb380f125870af9d8e642d0ad9d501798ebb70682cb1707860dceb21e19a07c9a20560cc02974b5a8e131c516aa8fa195128a5b928e6e8e2ffa31975b9c57371a3e03c429dade93e2a34ddd27730ef7ddc705b16a545a1086dd30bf5f02486b16cfe982a8d6a7e6999f7b994eb22ffab5033ccf2d547fd3be29835813220bfbe1cf0776b40d7b275466c7396e51fa82ccbee3cde714c076f49ce9d9e229b8fd9d0c9aaebc50be55c2c76c88cfe1e8f6470639264d17ff0999774a14171a3bee98fcdc255ec57826d33af33a2a8ec1ec4aa9db3ffe8acb3c5a53c1a0859af579aff8fa1bfb05ff00f8911879919376ccd743851c5de172f9249db1eea1951c6efcb8158e31e7e21ef584978653351", 0x1000}, {&(0x7f0000002a40)="aef92249446617b6f4d687d8f541577d10bc6db336b8c083f822b7004cfdc7fc38c0aac83020b5e97db3672c904badd0f742700d63ba2b0ef1831fd1309e4364", 0x40}, {&(0x7f0000002a80)="c6a7bde36b377ad1802217ab191acb4616c984c2ccf45aa7c071cf881927799748b115134a922511cc378fe2f4a9cbf7cd9541be8ab441f7dad5b9b108db99c61b8047d2bbacc1c6ea0b55cf2d92fb0711af2d340e839abfa7534d9bdc9744004e3bea83f9ed9be4b9c74da3baabab8950abe61043d8b4f3ce", 0x79}, {&(0x7f0000002b00)="8cc63bc95e35b55ce044bd05c2a3647c3dd87a31f0cfed7c2062445598708f203cacf3b7f613c22e8e2fca080a94338d7c1b97e4a11e262155e15532e3c5bf81d616b4301c0c99f85d26189bc910272c1a4714d033a9be5b6ad400498ab83e276a5d50d1be0cdbdbe58c45e3dfdc243ccc9e3279d1b2651570407afa883746926ae9b9a646e51f3bb867d24d8aaff26a7b73fdfde975444c48984253a6829ca5678983f8f88642e49eb8163c41c83a728e79f47b2f940ca32766e490b9c751e10a9963f4deb57840", 0xc8}], 0x7, &(0x7f0000002d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r9, r13, r14, r15, r16, r3, r7, r7]}}], 0x48, 0x4000}, 0x20008040) [ 428.010015][T11050] FAULT_INJECTION: forcing a failure. [ 428.010015][T11050] name failslab, interval 1, probability 0, space 0, times 0 [ 428.048052][T11050] CPU: 1 PID: 11050 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 13:45:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) [ 428.056846][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.067046][T11050] Call Trace: [ 428.070345][T11050] dump_stack+0x11d/0x181 [ 428.074751][T11050] should_fail.cold+0xa/0x1a [ 428.079353][T11050] __should_failslab+0xee/0x130 [ 428.084223][T11050] should_failslab+0x9/0x14 [ 428.088750][T11050] kmem_cache_alloc_node_trace+0x3b/0x670 [ 428.094487][T11050] ? memcg_kmem_put_cache+0x7c/0xc0 [ 428.099753][T11050] __kmalloc_node_track_caller+0x38/0x50 [ 428.105403][T11050] __kmalloc_reserve.isra.0+0x49/0xd0 [ 428.110796][T11050] __alloc_skb+0xc2/0x360 [ 428.115292][T11050] ? ima_match_policy+0x569/0x960 [ 428.120417][T11050] alloc_skb_with_frags+0x8c/0x3d0 [ 428.125556][T11050] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 428.132039][T11050] sock_alloc_send_pskb+0x4f5/0x530 [ 428.137259][T11050] ? preempt_count_add+0x6f/0xb0 [ 428.142220][T11050] ? _raw_spin_unlock+0x4b/0x60 [ 428.147108][T11050] unix_dgram_sendmsg+0x2a9/0xdc0 [ 428.152173][T11050] ? unix_stream_sendpage+0x8f0/0x8f0 [ 428.157704][T11050] sock_sendmsg+0x9f/0xc0 [ 428.162049][T11050] ____sys_sendmsg+0x212/0x4d0 [ 428.166836][T11050] ___sys_sendmsg+0xb5/0x100 [ 428.171458][T11050] ? __fget+0xb8/0x1d0 [ 428.175550][T11050] ? __fget_light+0xaf/0x190 [ 428.180157][T11050] ? __fdget+0x2c/0x40 [ 428.184275][T11050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.191693][T11050] __sys_sendmmsg+0x123/0x350 [ 428.196664][T11050] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.202919][T11050] ? fput_many+0xec/0x130 [ 428.207308][T11050] ? fput+0x29/0x30 [ 428.211147][T11050] ? ksys_write+0x145/0x1b0 [ 428.211240][T11050] __x64_sys_sendmmsg+0x64/0x80 [ 428.211264][T11050] do_syscall_64+0xcc/0x3a0 13:45:45 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r6 = dup2(r5, r4) r7 = socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') bind$rxrpc(r7, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ptmx\x00', 0x572ee3215d6e2cb4, 0x0) preadv(r5, &(0x7f0000000d00)=[{&(0x7f0000001080)=""/166}, {&(0x7f0000001140)=""/83}, {&(0x7f00000011c0)=""/167}], 0xa, 0xfffffffffd0b8c85) listen(r7, 0x9) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={r8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) get_thread_area(&(0x7f0000000080)={0x9d5, 0x20000800, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r9 = inotify_init1(0x0) r10 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x169, 0x2) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x1}, 0x1c) setsockopt$inet6_int(r11, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r11, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f0000000cc0)={0x7, '\x00', {0x6}, 0x4}) fallocate(r10, 0x0, 0x0, 0x1000f4) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, &(0x7f0000000400)={0x80000000, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @local}}}, 0x108) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000100)={0x0, 0x0}) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r13, 0x401054d6, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r12, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 428.211303][T11050] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 428.211315][T11050] RIP: 0033:0x45b159 13:45:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x86) fcntl$setstatus(r1, 0x4, 0x44000) fallocate(r1, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) lseek(r0, 0x0, 0x4) 13:45:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000040)=0x4) clone(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x10b, 0x1f, 0x4, 0x180, 0x33e, 0x6, 0x355, 0x4}, "228420a598363dc849adfa5a4c629a48404633f4ea14fe597587cbbae366bb0b0900b6e21c4ede98e2cb8c3517ce1ca1bc0d3faeff4309726e4d212d1e9cdaa9d7d12338dc0c578a1838b685f6f5ff41a57abb27c3640e0a7d5236ec704c48bad6dc76e4c32739b4cf02cee8b4f91ec2a82cc3356055188f19174f415bb124027f4ceb29570e091f70122f9dd7700a73b55fee23772d0553ff9e", [[]]}, 0x1ba) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc0506107, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000280)={0x4, 0x7, 0x4, 0x1, 0xfff, {0x0, 0x7530}, {0x5, 0x3421ef66320965f0, 0x4, 0x8, 0x7, 0x7f, "5927cd23"}, 0x101, 0x3, @planes=&(0x7f0000000080)={0x3, 0x8, @mem_offset=0xffff, 0x3}, 0x10001, 0x0, r5}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r6, 0x800443d2, &(0x7f0000000200)={0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x66, 0x0, 0x8000, "568d6fb57de0d9588fee624be479178923dce7f6e44de941f3b4224cc97b70c016d406a9a795e06734377fa4f0d8740dd8516397025a3b6412f8b6186a56014664e4050cad8422e726227e44bc24d703a9a9de758f0ce75b8e862a13ba53f2f1efef2f43240b"}) [ 428.211342][T11050] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.211352][T11050] RSP: 002b:00007fc7b5f3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 428.211372][T11050] RAX: ffffffffffffffda RBX: 00007fc7b5f3d6d4 RCX: 000000000045b159 [ 428.211451][T11050] RDX: 0000000000000002 RSI: 0000000020008600 RDI: 0000000000000004 [ 428.211527][T11050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.211539][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 428.211551][T11050] R13: 00000000000008a5 R14: 00000000004c9da2 R15: 0000000000000001 [ 428.301356][ T27] audit: type=1804 audit(1579441545.628:58): pid=11059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir928191111/syzkaller.KGIkeT/104/file0" dev="sda1" ino=16690 res=1 [ 428.301376][ T27] audit: type=1800 audit(1579441545.628:59): pid=11059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16690 res=0 13:45:46 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:46 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 428.378081][T11046] ptrace attach of "/root/syz-executor.0"[8027] was attempted by " àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ Õ\x09  @ ] !    \x0a    /dev/dlm_plock p     TIPCv2 \x0a N À@    ÿÿÿÿ /dev/midi# @ 13:45:46 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:46 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 428.952976][T11076] ptrace attach of "/root/syz-executor.0"[8027] was attempted by " àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ Õ\x09  @ ] !    \x0a    /dev/dlm_plock p     TIPCv2 \x0a N À@    ÿÿÿÿ /dev/midi# @ 13:45:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x1d, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000063110400000000009500000000000000419ed73ced0ac57b19ffefa60d41b7e6050be6027a1ae11515a3a270f2a48d9a9afea7cb86a3af568f297d555a616e38775e570c93cbf063fb197abd0e19f542cac4fd6bf283c203e676907cdb69f728f152dfe9422169efa736317185b3e4fc94f0f9f8fff91a9620a261bd74199d4e02c8e6766223df2c157c689de7f0a2611280a528c45b07beaefb073b4b5c8710d91d18db2f1598bd06cacfb935aa7d1fe186d8f542638d1b99601b581da5469c1c60a5f538f2634545bc0a77232ef08251eeadef1326e64b6f519fe219"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 429.118005][ C0] net_ratelimit: 20 callbacks suppressed [ 429.118015][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 429.118075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 429.129433][ T27] audit: type=1804 audit(1579441546.458:60): pid=11085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir928191111/syzkaller.KGIkeT/104/file0" dev="sda1" ino=16690 res=1 13:45:46 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc4, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0xf2, 0x9, 0x6, 0x7f, 0x3, 0x3, 0x3, 0x5, 0x2a5, 0x40, 0x317, 0xfff, 0x3ff, 0x38, 0x1, 0x2, 0x2, 0x5}, [{0x70000000, 0x3375385, 0x10000000000, 0x86, 0x3, 0x401, 0x81}, {0x7, 0x7, 0x3, 0x800, 0x9, 0x9, 0x200020000000065, 0x5}], "", [[], [], [], [], [], [], [], [], []]}, 0x9b0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000040)) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x210, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x104, 0x2, {{'cbc(des3_ede)\x00'}, 0x5e0, "eb63d2d061d91b07844532c1aca0f72e6e249c44ad245c8acba3e5b7fee82d647bf2ebe8edaba473d9cec3215f9d98f4dd2295083cd42dd6bd4a14f93d2fee49a95a8b3b5a6a439934fe11cfc05c502069c5277464e3d1d0e74752dad2af4df3fd7981550fd55e9676a9cde07ec728628f3478b3322a6812548bf70cee87d1aaceca2ac76821c08f40ff91c6c13ee4e08ee72cf4d9e1b070033474d1ea3ea27354a9e34f39fc81ca1a24a4e8dff90b490157e153f05499579a00ac1e"}}, @replay_esn_val={0x1c}]}, 0x210}}, 0x0) [ 429.129543][ T27] audit: type=1800 audit(1579441546.458:61): pid=11085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16690 res=0 13:45:46 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x2, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 429.438101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.438156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 429.438196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.438217][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200000, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r4 = dup2(r3, r1) accept4$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x400, 0x803b1c5d809257a3) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000b80)=r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004820}, 0x20044041) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x1) r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="f663b5ddb35d32496a844313f4705b11ef629d65b228766ef1d0e9f2bebd4b6829869ceb9171f8afebc9df84c4093b91b8c3496010fc6848f081bb68e1f71d4abc1df0175bae86c4d853d54e6f98a15197c39fd14d268e0945bf6754235eb919986514599dd651eaf014e7b00592ae948d4bde6b6b1cff1912ba1a87540982b4c8806e6e549399b161304eda7287ff0144047fee5c780b66f6174fa1e46c1209725e6c", 0xa3, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x8000400) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001130000040000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 13:45:47 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:45:47 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:47 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 429.998006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.003798][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x204, 0x0, 0x20}, 0x0, 0xc, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x100000000000026e, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000003c0)=0xe8) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5e55}, @NL80211_ATTR_BSSID={0xa, 0xf5, @remote}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) preadv(r0, &(0x7f0000000100), 0x18d, 0x0) 13:45:47 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x4, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7fc, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 430.216363][T11129] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 430.238219][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.244818][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:47 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:47 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) [ 430.282549][T11129] EXT4-fs (loop4): Invalid log cluster size: 4865 [ 430.349997][T11144] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 430.366302][T11144] EXT4-fs (loop4): Invalid log cluster size: 4865 13:45:47 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:45:48 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:45:48 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x5, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:48 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:45:48 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x6, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 431.109265][T11178] overlayfs: failed to resolve './file0': -2 13:45:48 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:45:48 executing program 4: ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xdd4) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x20000000000000, 0x40101) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000003c0)={0xe19, 0x0, 'client0\x00', 0xffffffff80000000, "240f97d27fb73013", "71f6a70425be30d63e9c8bfd2dee1d523391166ca9e010abb79af58fffb9614d", 0xce, 0x8000}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000001c0)="643e3e3e460f01c4f30f52ab9c000000c4425db853000f20e035010000000f22e00f01c46766410f381cd5b9cc0800000f320f20d835200000000f22d80f009392370000f30fc7b500000000", 0x4c}], 0x1, 0x2, &(0x7f0000000480)=[@cstype0={0x4, 0x8}, @cr4={0x1, 0x13605a}], 0x2) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x1000}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x0, r5+30000000}, 0x0) 13:45:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:48 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 431.480193][T11193] overlayfs: failed to resolve './file0': -2 13:45:48 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:45:49 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000004c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB="67306073a9943d9cfa2e112c12e7330d51cea1124ca348d7ff847e2d5c65eb5e355fa3a4cf8562b95f50bf92c78e7d3611c1d55cc08e22b220c8e3725be0ccf2227ad408e37e60491ba2d0563eec9af8ca12350a550f19e64aa6eaa5ee981e38404f8ed2b770c4888d", @ANYRES32, @ANYBLOB="000026bd7000ffdbdf250100000000000000e4fc000000140018000009007564703a73797a3000000000"], 0x3}, 0x1, 0x0, 0x0, 0x88d5}, 0x8000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000006c0)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000580)={0xa, 0xfffd, 0x0, @mcast2, 0x70}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) pread64(r3, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)) r5 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4000000003f, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000040)) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000080)={0xcfb0, 0xe9, @name="49713efd340548ecb6d1f0d54b351d95e58dfed645a2180dfd8c14fb1dd080ef"}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ff0f26bd7000fcdadf250b00000008000300", @ANYRES32, @ANYBLOB="2b003900090000000a000900ffffffffffff0000050033000200000008000300", @ANYRES32, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4048000) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200000, 0x0) r11 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r12 = dup2(r11, r9) accept4$packet(r12, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x400, 0x803b1c5d809257a3) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000b80)=r13) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="035c00becf", @ANYRES16=r8, @ANYBLOB="200025bd7000fddbdf2509000000050030000000000008000600", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB="0500370000000000050035007f000000060028000300000008002c000500000008002c00000000f8080032000c0f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000200)='afs\x00', 0x0, 0x0) r15 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r16 = openat$cgroup_subtree(r15, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f0000000280)=ANY=[], 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="94", &(0x7f0000000080)}, 0x20) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r17, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xe5) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 431.828885][T11208] overlayfs: failed to resolve './file0': -2 13:45:49 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf9) read$eventfd(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x180000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(r1, r2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x60000094) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x10) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x20000844) inotify_init() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x4, 0xd71, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990afa, 0x7, [], @ptr=0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0) inotify_add_watch(r8, 0x0, 0x46000010) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) inotify_add_watch(r10, &(0x7f00000003c0)='./file0\x00', 0x20000844) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r13 = dup2(r12, r2) ioctl$HDIO_GETGEO(r13, 0x301, &(0x7f0000000180)) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:45:49 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x8, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:49 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:49 executing program 0: dup(0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x44014, &(0x7f00000001c0)={0x1a, 0x311, 0x18, 0x3f, 0x0, 0x0, @remote}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000200000000cf"], 0xe) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x94, 0x3ff, "011374c2605916ce336e85c69f0c94e8dd002c621c4a10776647631d74ae5f543c2c213dcf9d66786b0f91871d75184ac5f5704a32fce21b16f4f418899862ad14a5cf7d405d1b2c5f387a252cda604e02f324aaead230237f650aee99bac461660ed4872b02400bf11762579e8542d35523491292880200c56ac93f5eb58116152a415352e3fd1c3f785e8e"}, &(0x7f0000000140), 0x1000) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 13:45:49 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:49 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xa, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:49 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:49 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x11, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000004c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB="67306073a9943d9cfa2e112c12e7330d51cea1124ca348d7ff847e2d5c65eb5e355fa3a4cf8562b95f50bf92c78e7d3611c1d55cc08e22b220c8e3725be0ccf2227ad408e37e60491ba2d0563eec9af8ca12350a550f19e64aa6eaa5ee981e38404f8ed2b770c4888d", @ANYRES32, @ANYBLOB="000026bd7000ffdbdf250100000000000000e4fc000000140018000009007564703a73797a3000000000"], 0x3}, 0x1, 0x0, 0x0, 0x88d5}, 0x8000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000006c0)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000580)={0xa, 0xfffd, 0x0, @mcast2, 0x70}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) pread64(r3, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)) r5 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4000000003f, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000040)) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000080)={0xcfb0, 0xe9, @name="49713efd340548ecb6d1f0d54b351d95e58dfed645a2180dfd8c14fb1dd080ef"}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ff0f26bd7000fcdadf250b00000008000300", @ANYRES32, @ANYBLOB="2b003900090000000a000900ffffffffffff0000050033000200000008000300", @ANYRES32, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4048000) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200000, 0x0) r11 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r12 = dup2(r11, r9) accept4$packet(r12, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x400, 0x803b1c5d809257a3) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000b80)=r13) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="035c00becf", @ANYRES16=r8, @ANYBLOB="200025bd7000fddbdf2509000000050030000000000008000600", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB="0500370000000000050035007f000000060028000300000008002c000500000008002c00000000f8080032000c0f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4005) mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000200)='afs\x00', 0x0, 0x0) r15 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r16 = openat$cgroup_subtree(r15, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f0000000280)=ANY=[], 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="94", &(0x7f0000000080)}, 0x20) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r17, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xe5) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:45:50 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x4, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=@getlink={0x20, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000300)=0x6) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r8, 0xc0506107, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r10, 0xc0506107, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r12 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r12, 0xc0506107, 0x0) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c004500a, &(0x7f0000000300)) r14 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r14, 0xc0506107, 0x0) r15 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r15, 0xc0506107, 0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r16, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r7, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605aa8a93e19f560257c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f2648b4ee013640d018b42ef6b342f9fbd1cda3e8646efe67cca25c539d82db75975698e3bd18ffb1e58f7c66f07459629f70d58e923182ef3f9cd2c022c", @ANYRES16=r8, @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYRES32=r9, @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYPTR, @ANYRESOCT, @ANYRES32=r10, @ANYBLOB="e5addbee9810c52235d666e539b3c6b411119cc752ebb3909890bea1dd9a1309f2965a2f558e108fc208b82804ef750037a45939b3017ed35ec31dff2e8a2d80b53252f53edb8d58aae9013765fec17a8e84ca468c6dc5d024d90eb922647dabfeee3f815333c18cae0b493d47f8b1e59e631c67f413ea4465b9208b5693ffd101c90e39ec2a89c971fc08753a2264ca762c451a50216f3f27167320513151222085a77ccad982f8b081de389fd5520a1665c028730da2b8b43a1a409335c154", @ANYRES32=r11, @ANYRESHEX=r7, @ANYRESDEC, @ANYRESDEC=r12, @ANYPTR], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="c3430d7f3ce183dc40f9a13f393d", @ANYRESOCT=r13, @ANYPTR, @ANYRESDEC, @ANYPTR, @ANYPTR64], @ANYPTR64, @ANYRESOCT=r14, @ANYRES64=r16, @ANYRESOCT=0x0, @ANYRES16=r15]], 0x7}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x60}}, 0x0) 13:45:50 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:50 executing program 0: dup(0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x44014, &(0x7f00000001c0)={0x1a, 0x311, 0x18, 0x3f, 0x0, 0x0, @remote}, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000200000000cf"], 0xe) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x94, 0x3ff, "011374c2605916ce336e85c69f0c94e8dd002c621c4a10776647631d74ae5f543c2c213dcf9d66786b0f91871d75184ac5f5704a32fce21b16f4f418899862ad14a5cf7d405d1b2c5f387a252cda604e02f324aaead230237f650aee99bac461660ed4872b02400bf11762579e8542d35523491292880200c56ac93f5eb58116152a415352e3fd1c3f785e8e"}, &(0x7f0000000140), 0x1000) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) sendfile(r1, r1, 0x0, 0x8800000) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 13:45:50 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:50 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:50 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x85c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = open(0x0, 0x1000, 0x32) connect$bt_sco(r1, &(0x7f00000001c0)={0x1f, {0x2, 0xa5, 0x7, 0x6, 0x40, 0x5}}, 0x8) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(0xffffffffffffffff, r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c6ff0000", @ANYRES16=r4, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x2000c040) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r5 = socket(0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r7 = syz_open_dev$sndpcmp(&(0x7f0000000740)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x40000) fspick(r7, &(0x7f0000000780)='./bus\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r8, r6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000440)=""/155, 0x9b}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000900)) r9 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r9, 0x2007fff) pselect6(0x40, &(0x7f0000000180)={0x20, 0x6, 0x124c22e2, 0xa2b, 0x3, 0x9, 0xffff}, &(0x7f00000007c0)={0x6f00, 0x1f, 0x0, 0x5, 0x6, 0x1f, 0x2, 0x2}, &(0x7f0000000800)={0x6, 0x9, 0x40, 0x8, 0x2, 0x7, 0xed, 0x3650}, &(0x7f0000000840)={0x0, 0x1c9c380}, &(0x7f00000008c0)={&(0x7f0000000880), 0x8}) sendfile(r2, r9, 0x0, 0x8000fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 13:45:50 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x300, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:50 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:50 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100000000, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 433.492091][T11287] QAT: Invalid ioctl 13:45:50 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x500, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 433.655072][T11287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:45:51 executing program 0: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x300, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 433.702298][T11287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.730846][T11287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:45:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x45a}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000006c0)={0x0, 0x75b, "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"}, &(0x7f0000000040)=0x763) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x1000000, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x7f3}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x67f9}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x10000000fff}}, {@mode={'mode'}}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x9, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:45:51 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x0, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}}}]}, 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x158) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', r4}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000400)) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) 13:45:51 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 433.970899][T11287] QAT: Invalid ioctl 13:45:51 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x600, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 434.157974][ C1] net_ratelimit: 20 callbacks suppressed [ 434.157984][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.169600][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:51 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 434.217080][T11308] kvm: emulating exchange as write [ 434.398126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.403929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.409744][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.416828][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:51 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:51 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x700, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:52 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x0, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}}}]}, 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x158) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', r4}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000400)) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) 13:45:52 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xa00, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:52 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xff0e) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x40}, 0xd8) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x1000) connect$inet6(r4, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xa, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000280)) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(0x0, 0xb) 13:45:52 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:52 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x1100, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x45a}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000006c0)={0x0, 0x75b, "23858876dc785d01e0f4048381bf6067df6b8d46a4daa83bee1a172f573344e9649777f90740acd91b132ee061d983218b3deef08a9b06d0c507b68cf062144268f32cee7bf8d056c8edec5e2b8c1f6864d13316b969cd9942445247af633fca5f823c28325ff1c0453d28bc25a2ac39dacbe4ad64fef9590e09b825c05a3187ea819c6eb30fdf5e8216893953f6ca5711cba8e8ed7b354a2efd257b5dbc70e74e85268c4bd7ffd8b7c6c4c07f4f7692c1e7f92d58759c36dd8e2a7843914912cee3043d86cac1b1e9a7e406b7f85372d499bb094b228d0ebed145163ff34008b63c4b6753d8deea64399a667dc8356abd9a7b52cee9f714dc3ca91302767e61d52cebd29d0e459b9de7c9f7d7d3f3dd48de3d7f40457c1a0e9376dbff06cb2fae63631f13350425fd5f17c3277fd046ec7c95fb02ff35ca7b48bd1e5e7dfbea6e34e66d956f4f924fbe6cd068b05fe253961be4e63187d1148506e56c482a47f5aae426f690939b53ecfb2119773b1a4ecf66a8bb11fed166499ad740b06f55297ea6067040b31b2ec56316d1ec54b5afdddcf25e9ed0dce62579ad42f289c179853ef56f3a98772a02888207b869465d69b668724cd3acf5e2bcc1b957f83fec756512ab906f1d1bd5aa532e67cba5fa1b4c6ca0db03eab9abfbfe8664ebf2f76a01d2f8ea88e53b0d916b75dfaaa82208997fdf2e64c551892bcb7ea528932fbfb0105d4d408c99aae9ef5c4553158e5dbc9d8c56ffbc8befd62c514b1adea4ebfe2d558f7aa17e986378c70b6ccaff9178532a95a0b489af197c67267140d492fe7c038458db6dab695080dbe6524fa4cfdde24e88ce2d852da7b2c69a8267db0cf85c443267c6190887a4ccaf09b282f089009ecc81b56b1b52555d619fb1c5c96de967ea1ae4952afcb1c3d1fa92186e31a277117823e4515379e62ebda8dccc58eb2ff498cad384a53a615aed93ac9bf75f3cd4dbbb7d4938e54682c8c99a91e8c8640d19e91d9fe1636590d30bd122ca11a5ea7e26d4fb6bae5fefb6279789ff7b7f39850043e54ff550bbfcbd9f53ee4e2e35b7e36189ef28e5c7f92e4995e456de061b8b154aab1af538e97b29ec0885f9841e1ac3222c80a55822f9939a43674d07e8636ff68e24a4beef775ff44a4fe39e3873c4afa26b071323074bf9cc2b087f04ee241696459c912edb4fe4cc66fb99341816bf6cc7fe3cbb7f3b776deb28e925b6f77d047ba6a3e361a55b4d3dd95e41fa3cf4078e70fb5e6d15a204be05c3c9e0cc2e42d126a44d1c46c0cb6d1f316662a1b38979adae402f788604a0f20960368fb4b903d8c88153c4c0b2897200091dd0b8f0ed64a94f9778d29188f2d828c7b69e63b02061d09830434cfac735736384f5df91d2baba51b2d7920bc4c1184389eacc5702149f940389e89d4c5c20ab7af128417e113481fb95c329e7a560b96be390a7922c2562e4b107302a8bfcfe48d703021335245ee13b9899f5169ff3c51750934c4b523d45ff3b1e6b37c1945f6e7df20f97b5597932ed35d8c8da46042f248216b0362ca1cad8fa8fced08e1aef953b6d30c1ed8c5f4219a78732de02061bb11a14cb183cd903c3ebe475158c23ce4f968447ce5fd3b1dcb87bddd95db5bc13fa3bfbefe668cc995fba4d79f9489669426678df1ac3c44fc5fb9f12ccf2346460fffee4ff56685228c037e5643767809e5b305d60bc1df7bcdac72226585dbd9d6e5bd28801d33054748d93e309f4c111c01396619e2cb4e4e119088d80a7a362cd4dd2c0e37a091c3de4fc95dd63b285bfbd7b605c751792e426f4301f2b8a9c6ca5e11df3f400fdc261dd03a4c9d62a5bf6bff4cc7a6c3d4374199d293a6993e640f581ab4d3e83733d73ef30c5b0830272eac7447abb58f138047aae63cdae0c5454ad67801b6a90ab3bcff458094a10de7fc18521b701aa5ae6d9c50a8a7357aceada94e53b9dc6a2f6012f87c10a3c0e5eb37f4151cbd448e50c1b48730d85fca7c3aa23947bf1eea1880021c4271e4347e8b294d51863a97290908e33fa7142c7c4e72abfe9f914b6d138b932a11b7e395c6c42903c4e772e6368b20d2381bcd5b8adfaf756fdd403172de6cdb9fbdb71748cc0d8f31e5459c226da1a655edd59572c0b4be64b44bbbc16fa5451a3fdc658c5846c137d7474b14fe13b7b0613813b13e6e7189c02f7ac200d8f33eb041eb3ae7be6d8258a187c6654ea38fbf3260241c741a1b1a7f90f7dbb0d244e38f2cd13b711ff9bb7c75ebb87c8c422977674afe2c617799db2f5a2efe2dfe38e50ea709167c0cb49171f609beb366f72c331c9b64c42fda9a2bddcc81ebf98b68d26732dda523cb9680e52c3d30c5d7a535dee9ead898c69a854890e580ac3df75d9b0dffb5c5537f3d1ad8337745d4ae412c1ad23a3e9f2c36225ccfb63bc5ece270600d1471bd816bcedead3476c34bb135f2f2d75b164045132b848926b501ca8698ab27233d632b9d341e109b4ebc1da40251f9341974ea2588f1d81dd3ef81d1b7cd147855e10adf07b5a534f88fc1cc117ad2d4a63d8ab18cf7f97ab64733d590aa2c1dfbe284f09deaafd8ebe8c1f86dfcf5a65b86d21712866aa4b9155c52ff5ab23bbba347ab6201edb7121f9d6471dd34ee4974da4c1"}, &(0x7f0000000040)=0x763) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x1000000, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x7f3}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x67f9}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x10000000fff}}, {@mode={'mode'}}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x9, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:45:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x4, 0x9c, &(0x7f00000001c0)="05238cf55fea44a942fb1cf7d1620e6b7d6399fe802d4a61cb9dd6124d361d8d391bcfadd2f561e11b9866d8e9e058dbee06acba2b8becad15d05bce37946a1a0a4c63a46147d25768fff8e586f062353f2ff3f2e9e6595e912296710f4f59b7edcd76117448c5bacd7aa4d5f834b50b059ea335b5064aff6128ba548ef53d8515ee88823ac27e4430d0425d4df9d41b3599f6509be2641010b79abe"}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x60) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x13, 0x0) ptrace(0x10, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r9 = syz_open_dev$sndctrl(&(0x7f0000001e80)='/dev/snd/controlC#\x00', 0x8, 0x200000) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r11, 0xc0506107, 0x0) r12 = getpid() rt_tgsigqueueinfo(r12, r12, 0x13, 0x0) ptrace(0x10, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) fstat(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpid() rt_tgsigqueueinfo(r16, r16, 0x13, 0x0) ptrace(0x10, r16) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f40)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000002040)=0xe8) getresgid(&(0x7f0000002080), &(0x7f00000020c0)=0x0, &(0x7f0000002100)) r19 = getpid() rt_tgsigqueueinfo(r19, r19, 0x13, 0x0) ptrace(0x10, r19) stat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket(0x1d, 0x800, 0x4) r22 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r22, 0x40086602, 0x400007) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r23}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002240)={0xffffffffffffffff, r22, 0x0, 0xa, &(0x7f0000002200)='*$trusted\x00', r23}, 0x30) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r26) r27 = getgid() r28 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r28, 0xc0506107, 0x0) r29 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r29, 0x800000c004500a, &(0x7f0000000300)) r30 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r30, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r31 = accept4$vsock_stream(r30, &(0x7f0000002280)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) r32 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r32, &(0x7f0000000000)=ANY=[], 0x32600) r33 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r33, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$KVM_CREATE_DEVICE(r32, 0xc00caee0, &(0x7f00000022c0)={0x4, r33}) socketpair(0x15, 0x5, 0x6, &(0x7f0000002300)={0xffffffffffffffff}) r36 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r36, 0x800000c004500a, &(0x7f0000000300)) r37 = getpid() rt_tgsigqueueinfo(r37, r37, 0x13, 0x0) ptrace(0x10, r37) r38 = getpgid(r37) lstat(&(0x7f0000002340)='./file0//ile0/file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002400)={0x0, 0x0, 0x0}, &(0x7f0000002440)=0xc) r41 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r41, 0xc0506107, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000f40)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000001fc0)}, 0x2080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000380)=0x7, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01f1210f6ed7e1000000000000003a7ef030", @ANYRESOCT=r42, @ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x3, [], r43, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0xf, 0x10001, 0xffffffff}, 0x10, r44}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r44, 0x4) r45 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r45, &(0x7f0000000000)=ANY=[], 0x32600) r46 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r47 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200000, 0x0) r48 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r49 = dup2(r48, r46) accept4$packet(r49, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x400, 0x803b1c5d809257a3) ioctl$TUNSETIFINDEX(r47, 0x400454da, &(0x7f0000000b80)=r50) r51 = bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x18, 0x3, &(0x7f0000002480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000024c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000002500)=""/215, 0x41100, 0x1, [], r50, 0xc, r2, 0x8, &(0x7f0000002600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002640)={0x3, 0xd, 0x3}, 0x10, r44, r45}, 0x78) r52 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r52, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r53 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r53, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_FIOGETOWN(r53, 0x8903, &(0x7f0000002700)=0x0) r55 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r55, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r56) sendmsg$netlink(r4, &(0x7f00000028c0)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)=[{&(0x7f0000000480)={0xdc, 0x2a, 0x300, 0x70bd28, 0x25dfdbfb, "", [@generic="75c9b4fd6de5f81829057d3fabf7eb7edb3788b39bb170ae10f49490af679c9fc67972cafbf7b2cde2aa4c46eb6448836df5da0fb0228177f44baa3d953aa91dce968e0ea2cc73d239afdf3b37c824a356908054698fd5c671e48706bf2d4034b2ba8a7f0baa99e450c5004ab4b2946f593a6b3d9500c0163d6c8d0b591ff274780f10dd0f54c0148b2fbd035652f17ef465502f09ac6bae0a66b14c8dc5ff8cb10cff35b685b1c9ec6c68168aea34efff42afc6bdef280368d1e01f3d3800b3722aef4e902945bdfacb"]}, 0xdc}, {&(0x7f0000000300)={0x20, 0x2d, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="1f2801ce7a40ca21276c18d775"]}, 0x20}, {&(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="548d5257ca66f865826ec694"], 0x188}, {&(0x7f00000007c0)={0x1388, 0x2f, 0x400, 0x70bd27, 0x25dfdbfe, "", [@nested={0x123, 0x64, 0x0, 0x1, [@typed={0x7, 0x20, 0x0, 0x0, @str='lo\x00'}, @generic="127e5b8338a834c4502f187912313971771d79df92af4369497cca8b8b5aed4098bcf3f91ddcf87e28d944774489112e24107a067a61bc", @typed={0x8, 0x66, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r6}, @generic="ff72bb1362d9a87f8af86353a353538a5b2458d0ebeef7807c90df839552fefa8846b14f0f3522690b9a1003f1212a8d694bbfe266f911f398dedb0825da15670b094b86fdca2d2703ccd10ed46a68f49bf13d113b633e8efc153b2192de45d89158d181547326aef85a6bb262d140b70e843b09c7c6e6d348587b2283b2b458fb57214e8cbd63f2c04e7cbe0ae7369295a6924fdafcfd6d52725803edd77643eb95ec004e56058920ff76eb6ef16d9a39760c2d", @typed={0x8, 0x80, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xc, 0x89, 0x0, 0x0, @str='cgroup2\x00'}]}, @nested={0x1004, 0x69, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0x8d, 0x0, 0x0, @uid=r7}, @typed={0x4, 0x56, 0x0, 0x0, @binary}, @typed={0xa, 0x38, 0x0, 0x0, @str='eth0{\x00'}, @nested={0x236, 0x6e, 0x0, 0x1, [@typed={0xfb, 0x7c, 0x0, 0x0, @binary="c244144df3411a7a8bc6d9ac178f0f16b6111648ac101d8d2417b684779c4e65ac629ffe49362654041515a220237cda1a978b3b9d68ee8a65e07bc7a208321736bacf31efadca08a46adea416d2f92c8b1caa7685be55f79ee9ce3bf0f58fcb5098995fdb2d8d9dc4b160befeaa3b2ada43c6f10df0e3b5ff25f8e47bd85be67a77ff49985a0e97bef6a934c2b1c6430604ace73312c83f4dc19888a809683df6a2428174751ebf4fa11856057d0bd99e34e968074287a79b178f14539f86f428f3e886b207708db9dab03da0f77266db5b43b90b61237cdbe7d265ef8000295efe18a6f200a8f33b0f7bb6918223d4c9a04be11e265e"}, @typed={0xc, 0x42, 0x0, 0x0, @str='cgroup2\x00'}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="1581a7995ce63c337283c9d6f926d4e7a3199ac0eb3412c16f983f6d7f916e5537b43ad9a8e3232148e996c051025cf8890afa25aee73cb52c8db92dfdf775fcc3b0f3c1f21bfbd08b71c8bcc788312b", @typed={0xc, 0x13, 0x0, 0x0, @str='cgroup2\x00'}, @generic="9dad9abaa68deff65983d0ed7d901e7bd977515fbe967e0452343088586c346ccb47343589c9fc9941d00ae16dcbb266af708e8fc0c3974a95a134bf9afe8996d8bffcf0b35be2251ea016122111d0612ac398c85029cbdb272fbac76da58e0ae6dda78769b3a298a1dddcf6982265e6e4e4b2c21a6413", @generic="6bcd67d82b6e31ed07c4f736d8bb53d4a14310006cee3c3b0094be93023eaaddd31c065175c19cb7d261763e11aa3e2117290f78292973f7e84ae35f4809b446d38afb"]}]}, 0x1388}, {&(0x7f0000001b80)={0xb4, 0x3e, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0xa3, 0x4b, 0x0, 0x1, [@generic="da1586841279c1090a9e2c185eaf897e413f25809086187c38e1cf8e63c3c4294d12594f52b74526f543f6de80bf644cb42098509210312190ad43490cf79e0e2c6f3f2e995663dfab0f875190dfbad81c5dc14232000828ef9bf024e75952957d98a9c4c0b302c3e1c14bc5da1dc50ef79dea2b47a53b9712e983da72e62663fc3057554eede1546f9dc66ad7ef9f757f402b", @typed={0xc, 0x24, 0x0, 0x0, @u64=0x3f}]}]}, 0xb4}, {&(0x7f0000001c40)={0x10, 0x40, 0x100, 0x70bd25, 0x25dfdbfe}, 0x10}, {&(0x7f0000001c80)={0x38, 0x16, 0x100, 0x70bd28, 0x25dfdbfe, "", [@generic="e2a118f5112260bae268ae5188b3a649d9d0e282cd3533798fc2ffa4fbcf151390938e3f495f"]}, 0x38}, {&(0x7f0000001cc0)={0x12c, 0x13, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@generic="a33f27a23043babb6891038c91ed0a18653ec81780b54e1018225b8d35e009cd6370d7c6259c06a16b03de8c1855fba7e013c2599c82614e899bf80f3aa0c156aaafd3fb0544cb50104672", @typed={0x8, 0x63, 0x0, 0x0, @u32}, @typed={0x12, 0x87, 0x0, 0x0, @str='memory.events\x00'}, @nested={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @fd=r8}]}, @generic="84361b0d636cef18bfb1eb995592663936a2968956ef03e32a1343da5504fef8b3ebd0dd91087199dc51b947687860c6d33f3b60e6918af6d052afaa4e88fa0afe58e5d657d723fbcf877491c43d15bd5cce94ff6c6404d03122100fd129d5c1f7ed20e44a01fb6ffaca6f1fd1532a55784c0ad6614e82b94f6e38bbbf346aff2434b527061bc8f941ed72fcd2e8ed2cbdaecd7804db3f298a05c46cb8f86cb2054a69e01a4f85c077"]}, 0x12c}], 0x8, &(0x7f0000002740)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="7b28b56d3300717db29e1dbd", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r21, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r28, @ANYRES32=r0, @ANYRES32=r29, @ANYRES32, @ANYRES32=r31, @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r41, @ANYRES32=r0, @ANYRES32=r51, @ANYRES32=r52, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r54, @ANYRES32=r56, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x100}, 0x4000000) link(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000040)='./file0//ile0\x00') r57 = socket$packet(0x11, 0x3, 0x300) fcntl$getflags(r57, 0x41f) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 13:45:52 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:52 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x2700, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 435.358001][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 435.363790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 435.530307][T11373] can: request_module (can-proto-4) failed. 13:45:52 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3e80, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:53 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000005000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000009536aed6e5cc32bc64bcc45b3be7a4c1a78e418a29d39b8dbe8c0fa5f4a6efffda1effbe330c4ea941b5574b9d77f844b2c02c8469e2d2d49320b59d5a026bf2fcfb1345f6315f840aee48b7fdc6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000400)='minix\x00', &(0x7f0000000500)='./file0\x00', 0xd14, 0x5, &(0x7f00000017c0)=[{&(0x7f0000000540)="2b2a91a8ac9cbee3a4624bbce19c7f6a283d096201c43855a22438140832713ba39448302811be132be08bcc1c82bfb764db446aae44eb5175dc10ed4a73f4f212a1324343", 0x45, 0x9}, {&(0x7f00000005c0)="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", 0x1000, 0x100000000}, {&(0x7f00000015c0)="ccf03a31d8e7d187b7f8c77e6ee98c801b539b43abd6bd5770e07ec231fef0a12555720f62404bb56d32d10a7a6e6242f91ed707f8bd110273d9dafe9efc1f5366bbf4869714332cb8a01d8d593200b8f8533f8ab1ab58a6c99e868d9d81aca5f04f268c619e49500e4d57e6067a0dcd558bf7209cd71ff5cda38acc4cb81b8525c8247fca2a7d2cf4a2eca8d421c60f678854b113a47ac0ea04fe", 0x9b, 0x400}, {&(0x7f0000001680)="c8b971693e1b9629b3eaedd7deede3f27f3263d67fcbe1f8d70877765eeb7994e7362aefaf4f43a99c6fc8061045d2364a90917851d8f46102d10c77e2a5e4773765523ba1816b099ed484e35d0260ad5f701b45d7a7f3540f9d29927ca765d2f742652c6910de839c9a81d8d26a39f44f7cded76a26fcbf8354df9a7b5c22018a702591a0813f77046a03deb85f6f24638e36833bdcc6e7e6f42ccc73d5718d08fedcd1e9675fddfc3adaf18c71bbac282457792c940faf9b3c3ff0b9ea12", 0xbf, 0x2}, {&(0x7f0000001740)="dabcc07c9b40aeb5b4df2f1a9c5714884be1306f00bb868db0e4ef756469f64e3578876a4b124e7a7592738a4f35bce74c0eba0d72f7d3755f861fa30d9e00aa3ac23976bf558be0540a7a6adaccbd6afe9abf49956840a9a5de68e8df39c415bd53", 0x62, 0x7}], 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x13, 0x0) ptrace(0x10, r5) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x29, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x2}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa10}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xad0376e, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5, 0xa, [0x3, 0x7, 0x3, 0x20, 0x400, 0x907, 0x101, 0x4, 0x3, 0x101]}, &(0x7f0000000300)=0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000380)={r6, 0x5, 0x0, 0x33, 0x3}, &(0x7f00000003c0)=0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f086dd", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 435.687993][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.689753][T11379] can: request_module (can-proto-4) failed. [ 435.693812][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:53 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x4, 0x9c, &(0x7f00000001c0)="05238cf55fea44a942fb1cf7d1620e6b7d6399fe802d4a61cb9dd6124d361d8d391bcfadd2f561e11b9866d8e9e058dbee06acba2b8becad15d05bce37946a1a0a4c63a46147d25768fff8e586f062353f2ff3f2e9e6595e912296710f4f59b7edcd76117448c5bacd7aa4d5f834b50b059ea335b5064aff6128ba548ef53d8515ee88823ac27e4430d0425d4df9d41b3599f6509be2641010b79abe"}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x60) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x13, 0x0) ptrace(0x10, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r9 = syz_open_dev$sndctrl(&(0x7f0000001e80)='/dev/snd/controlC#\x00', 0x8, 0x200000) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r11, 0xc0506107, 0x0) r12 = getpid() rt_tgsigqueueinfo(r12, r12, 0x13, 0x0) ptrace(0x10, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) fstat(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpid() rt_tgsigqueueinfo(r16, r16, 0x13, 0x0) ptrace(0x10, r16) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f40)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000002040)=0xe8) getresgid(&(0x7f0000002080), &(0x7f00000020c0)=0x0, &(0x7f0000002100)) r19 = getpid() rt_tgsigqueueinfo(r19, r19, 0x13, 0x0) ptrace(0x10, r19) stat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket(0x1d, 0x800, 0x4) r22 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r22, 0x40086602, 0x400007) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r23}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002240)={0xffffffffffffffff, r22, 0x0, 0xa, &(0x7f0000002200)='*$trusted\x00', r23}, 0x30) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r26) r27 = getgid() r28 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r28, 0xc0506107, 0x0) r29 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r29, 0x800000c004500a, &(0x7f0000000300)) r30 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r30, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r31 = accept4$vsock_stream(r30, &(0x7f0000002280)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) r32 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r32, &(0x7f0000000000)=ANY=[], 0x32600) r33 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r33, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$KVM_CREATE_DEVICE(r32, 0xc00caee0, &(0x7f00000022c0)={0x4, r33}) socketpair(0x15, 0x5, 0x6, &(0x7f0000002300)={0xffffffffffffffff}) r36 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r36, 0x800000c004500a, &(0x7f0000000300)) r37 = getpid() rt_tgsigqueueinfo(r37, r37, 0x13, 0x0) ptrace(0x10, r37) r38 = getpgid(r37) lstat(&(0x7f0000002340)='./file0//ile0/file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002400)={0x0, 0x0, 0x0}, &(0x7f0000002440)=0xc) r41 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r41, 0xc0506107, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000f40)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000001fc0)}, 0x2080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000380)=0x7, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01f1210f6ed7e1000000000000003a7ef030", @ANYRESOCT=r42, @ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x3, [], r43, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0xf, 0x10001, 0xffffffff}, 0x10, r44}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r44, 0x4) r45 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r45, &(0x7f0000000000)=ANY=[], 0x32600) r46 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r47 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200000, 0x0) r48 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r49 = dup2(r48, r46) accept4$packet(r49, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x400, 0x803b1c5d809257a3) ioctl$TUNSETIFINDEX(r47, 0x400454da, &(0x7f0000000b80)=r50) r51 = bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x18, 0x3, &(0x7f0000002480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000024c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000002500)=""/215, 0x41100, 0x1, [], r50, 0xc, r2, 0x8, &(0x7f0000002600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002640)={0x3, 0xd, 0x3}, 0x10, r44, r45}, 0x78) r52 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r52, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r53 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r53, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_FIOGETOWN(r53, 0x8903, &(0x7f0000002700)=0x0) r55 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r55, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r56) sendmsg$netlink(r4, &(0x7f00000028c0)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)=[{&(0x7f0000000480)={0xdc, 0x2a, 0x300, 0x70bd28, 0x25dfdbfb, "", [@generic="75c9b4fd6de5f81829057d3fabf7eb7edb3788b39bb170ae10f49490af679c9fc67972cafbf7b2cde2aa4c46eb6448836df5da0fb0228177f44baa3d953aa91dce968e0ea2cc73d239afdf3b37c824a356908054698fd5c671e48706bf2d4034b2ba8a7f0baa99e450c5004ab4b2946f593a6b3d9500c0163d6c8d0b591ff274780f10dd0f54c0148b2fbd035652f17ef465502f09ac6bae0a66b14c8dc5ff8cb10cff35b685b1c9ec6c68168aea34efff42afc6bdef280368d1e01f3d3800b3722aef4e902945bdfacb"]}, 0xdc}, {&(0x7f0000000300)={0x20, 0x2d, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="1f2801ce7a40ca21276c18d775"]}, 0x20}, {&(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="548d5257ca66f865826ec694"], 0x188}, {&(0x7f00000007c0)={0x1388, 0x2f, 0x400, 0x70bd27, 0x25dfdbfe, "", [@nested={0x123, 0x64, 0x0, 0x1, [@typed={0x7, 0x20, 0x0, 0x0, @str='lo\x00'}, @generic="127e5b8338a834c4502f187912313971771d79df92af4369497cca8b8b5aed4098bcf3f91ddcf87e28d944774489112e24107a067a61bc", @typed={0x8, 0x66, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r6}, @generic="ff72bb1362d9a87f8af86353a353538a5b2458d0ebeef7807c90df839552fefa8846b14f0f3522690b9a1003f1212a8d694bbfe266f911f398dedb0825da15670b094b86fdca2d2703ccd10ed46a68f49bf13d113b633e8efc153b2192de45d89158d181547326aef85a6bb262d140b70e843b09c7c6e6d348587b2283b2b458fb57214e8cbd63f2c04e7cbe0ae7369295a6924fdafcfd6d52725803edd77643eb95ec004e56058920ff76eb6ef16d9a39760c2d", @typed={0x8, 0x80, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xc, 0x89, 0x0, 0x0, @str='cgroup2\x00'}]}, @nested={0x1004, 0x69, 0x0, 0x1, [@generic="279dd02397ceb3f0ead36606b2a61cd90bb4db5012e9c451aad5c32055d3965ea2f284573d8d7828c12929132f1d34805d1612dca440d988c94d534a5c378ac796eb9ec55ba4a88b98cc0bf8ba99072ea1c994dafadadd38b7fe28cbbc0df46b5c1690640d66e3f5993d0e830bcca3abf496a524a292a2e0b0d852e0886ba493a9ee738129f4a1828e90524d644757f299cfdc969432149215dbe29daddeec930ae16aefc4284670c6a52dbf1ac94bb2cc985a13833f1c7415bdf49992bfc5f05beceb0753e36c8fb973524a2538db08aed3248bd56431889da4e4ee70eaf5616e4e0364b46ce0c498f4850b42c021ec167e931fba127e8c770c7bf3f561ddd872ef9c424f0a118fcad3c9adae4ee3c5f3c4d1860c24d426b16ef2a024712bf3df3aae0317fe2871964f962c021c6ff466cd66b130f320fedd648bdc38b22c64cf11e04ab1f90e9a9e236212776415cf7ee081976518c1dacb4ec2cfd749832f24a333d390d9ff34d1a513c035ddeb261f5b884c786f3f8b75233672d7af20f6354fbbfdf48d8099602d6932631ebea38e313425d03829c3ec992b625155688280031a9b78fa2b2686aeb9bea5d2b902fa16ebb676c2f37398ca72ffceef33b3a767899825bea25a0211d32fba259d0bc8ec45bc89a857933db2cdbdfc88091cbfbd5860959c2b175be5fc5f10f39daab96aa525b2402944b7594301ca4da8577fab25256f940e7cfac97ed4f7e339541c5d8488429e601718ebd33f991d4051602c3addb4f393cede3b526914b7ea2dad6e599037850251c1bc6a961ef0226d8ff8000a718f73fd6bf3c3eb6668ed9fedc3e07a2c0f2c2e2b8a5641f102ea3d6c4f0418661909acad31547576f3228ee400f345bd552baa0994c66994cb3b8e18a4b3c5daf19701b59e3765900b2f7e0d482b603dce154ae6b478c66aeee6548e2cf78fc979c4c290f792e6fb58830a4b14de15765633e325ae7976cb9a3e15188b7bf91c5ab78cb1a74e7dcc719b284a4c8b2c2ac79f533355f25c9a5eb846fa3c6d6eb12a2be5248f003205547aa3eb9b53ed93aa2e41f33d82aa3dfd87a78c245a6a4df9b1efe9e4195eca15ff74efd9bfa8658b08233aee631193bdd394410764d86caf2d1a8a6b35f8777425ee2485b80f42e57b3073c32ac2530a18597bb0d20dfc174a9a4646c8ac563fdd38ec2318ba1cf01ceb0ae6e7b84d4440608f890530843e9ff702f4370490d5c8de013dd6103d3a3fbb1aa0d279e6a1e702c992030a43e6c6c1f9a0c1c88503c0a15b7f55e3b8fbef7566407b6f18bd70fe8fee92dc5a4b68b46d49c7ef2a7fbd643510c45ca88a53901053c7692f7e88a8ad7ee86fef768a0489396faf53b6c05e70a0d8f4695ce52cb0e71a252cec68d077054980b9ab61ff819c88557a580146782f613ea7daee177f4ff151876ed6fba70637cce8bfd1b5efadfc287df7ff82be78dad02c406d49ba5ce4e74dfec8a6dc7971e56708e60b350d1d1d3730c89c8186c3ee81c3426acc582932808190e4ab7de54dac6dfdd6166f223bb6f0b4d1c320d5854e255c01f4894792faff975ce41149874e2a6c16b489badf9c86985dbd141248cee555b7e2d533d021d026280a3b1b8a03d0081df66d09e630d1ce947122233b904537877d6336dfb9a8704f9a5c89c6732cf85a68292ce2d7055c5dc27068beec867a933ec38bb9f215bc29b439292a75b13700c164c83d5c510d6ca9a0c3a6c41a2094994fa2037a8f45d8022366b2e5005d9bcbe74daa315c6b7519a365864ecff548b4f962f24461ad907370bf2bb76c9d7f0f1136eda90b78210f851bad231ba2f6646824c7c2bb0c170d3971f62be4cd1ef108dab058e82613f368a69bad065c1961276ab87cf077c3d9eff57418aca967facc8a2e87fb247c80ff6a79f8dbaff114981a60383d9841f51d8b237fff1546e50de712a7fa748735a3baaf13574ea604189a4d9c6f1bd96422ec7ef7fbffdf2317ceab4547bf4badc34b5d707f007be0202f5cf0482a494444302053dae07ece45108c1f96e05c73b216a5b68f17024150e279271866ebe7c7a1edfc8b7d7c8776c71c8ebaf3be678a496665b56c51a194ddafde4454d6ffadab078c8bdb19345a1828073b31a05857071fadd476c3db47566567a15afa63ab80bfd2b68462917be98d7201c6e2a038cd67b60afcadd2d67a656b32b425a0f8f50a24ad1f2b2fd317777e831a7cb8e52dda5211117e060b2d069dc1b99e183ce85f470e06ddb6e97de4117e37f0f23b2d9d4f07c328b7ec1e119c5df6cc82b7cc5238c9909e9e10c1975737bf56b9cfeeb764ec49d0a2caf4351070a05001a78921b7f96383b32236d27e650c9c6028106d413966cc374c4a4f2cd62b6bc89311f7cb6d5516eb035be64da519ed6a1ac97e46afdbd50715d80a8cb7f3c56ebd3a65d022a6cc8bfc2f7e00bf7523fff9106fd251436051bb47e9edb4e3fef982154d366ed263beaa7a0e80acd8c5f922e83b4cc412597d6a39d1d0778bcbfde11d7a4ca52fdeed07292d6bc3ff1c6bcc6a6c464d4ac2261d34dba32e2b7a1cca634319ed0bbe129b13d7b7799e5dc6639eb9254541b87bd2d79207c35b1ca01e9712dbb0acdc6554b65e620837d2427ec3372f3c56bad718dcc145be0faa60b266e409ec86d23aeddac81d147f06529d65ef6edac0f407c2d88352634fcd902bc6199c310a3ad87c7a4d1d378394b8a74336281313c4ab1edbb2c2f528e58c569d291aeba06199c17ad14a5152ab6a330c09d37a5e6aaf05649324e6e60f0bf53d487e5bf5c1e2ef278004003e2969286c4dbd1ec8abe42649cbee1b99d946ec77076bd231667720668d30ac0091c145e085cc37eab383ee076b56abf61d0929423b162d42e19f8df75968b1d4fe7e1386d40a63a8702fcf815045d1afe6e40cb967f8c4c9d139ee39c39596ec92056630c9f8863fac52f04af11b0b509d0a726a2a44015e751294fbdecd3864b474a73e45e751748723bcb91d00bd029a7ec23e96eeb39fe836c0a64ec30ca1b0e22e191cef069a59a9b55246fad13a1fff47a8899c8d06f0c81e3a56066ce008b3bd06192aadaf11460683170ed7d59cd0a1078a442ef1caae2802ec31f9e51b20b9f3ec31dd14574eb7d3172f411dd563378644d36319fd7b709dbbcbe43da0dffaada135c72b988bd72438f0a5503fd0f24a244720a17cce1af8c731fab8fa01565ab941d19f68b3c26f92635c17c924d23dacf3224ed6b7dfd5551070996138d3a888eaf2024af7789783105b7642bbb97956f6b030336d5f4e8210bbf5aedff57b8cb93c241a8c80d726787895e6151ab36737cbe9fd57cdfecb9ef4d149c0f2adb7ef575bdbe04c66cb565804619591218aeb1630618f4dea25e1ffda6e67e82f84e33876c5066b9b497cee86bd7a4671330afbc4acf4bc8c0abf992f01839d00cdcede4682c29fb14219628980264bd0e2c9d6891565fc65e61f45a9171a94d836c79be9c8e38aea48aa40a446cd879efdd9b8b04e452880f02cae486f72c826f41f935720c053f4ef1f1bb1cdcca51349d3400204140524426f743909e7132872385be54d9aa9cdbabd59df45509f8074a4e233382a2e93b9e4b60882fc31dc1026528dfedc1b73f93bf780a457751c26e4dfb3e53a1ff89b834f85e06b28073775bf5c1559b62a3c9eaa943b9b57fce75feaa39c3af30e08d3780a562cf5a0809e227f6dec5e3855769512db73022ec4e53238fa68d7a6ce7d2b5783741c652cee93876031119d2ff790e5bf7a214f2748ac0ab0b3402e31e069818b23aa0f69b949a8179d3eaea81510363973eec845ce2d545916bd7e7f7a7d16fd286590b7343e5eadd11f1a65a422e027da582bc7ea66841f8889d8ad544cf08774e7a48d0473115903976e7ac266ce47b71b52c38226831f3ffaa9fb5c0023658bd2bf3ef68351490a981d331945100aabee9e6da1292593759d95feb4a37500fe448bb151b83a81f0fe45c2fb028b6bb98376af733f4f086f79d63ede79985f9f041751ee10773fbc5e57e840d48e55d2b54c4f57173c2a2f527e5c3656a49692f5103db8fe53565eaa867165ea412f2969a193a3edf9364cc1b449c610f64aae1b8b18b6e77c2f72005ab62af46d133cee735cdd1ec6f4bf7f93aeebec3fc5b4f6ad08646cc797318b66a6aa755096a6d7114735a247ffe49c0a4d9de75af72c20a5b89c290934a57d89d5d87fdeac8f4aef7bcd659fedfabb44fb657e90481009dd0fff602c8a8a24d2559bdb096bcde51aae89c920061690a12e14f16751e5b7e921a1c8a946bff03cc25ee6814ab05bb489148098b7456f7e3c79c35d2a9e842465098bf2081d5fe6403f58e943879c42656902077fa971ee71714372fe34e0779642cb60105b6369f65a90476405b24eeb91f0148c45e1a1c75c7add7669fb2884aa3d64d7d3fd0d3cb6169cf5351369b520eb377e84f1636a286d6d3e60057ac8e630ebd651c0bbf04146b54dc0ca426ff86acdb64f6b9bde05afd4d93b4325e81b393320abeabb31587f28da1cb0dd0cf30708028a3f943a1eb4cc7c8c4657b069b40f335e1df181e2afc2cdf95ae58aead524720b4b4b0600300253c8f576dd0f55c5d0fe97eb3c8c4a3d0b695f3125bb0a10e0cab855b3be1d672d16dc4fd3f731e0bd45c439b73e4b2adb3fadfdb74ef521bf043e70b74075e4a9af4012e9c7732d6ad65fd4235f5aeb3783ca4b0fcc8daa7a92f60d3b8c30df5d2a2b2a46d87b5b0b1718ebb1d83f8b291986a3f9bcc6eb9f0b045fc6f67df5d237c4f1456fe2391f256214bb0c6d8488640868caaed0d0da7469fcc1df2b169a3ac1c5bb6e5a6d287cc9b45f6db3d927c1d7b5ee0836385a4f28fe9a69d9a55452d81c308070a98915a653dcb29405a68f88927dff576363722a46f288fc16bbd02dee960b465d67ac10b1f92560e3f6e62edafa9e63ea5cf51367b791d8fa71e985739b7266059772660276fa6e433e413b5153fcd54985509246d628cc10f2011668959283a1416b315fff280fb40d04272384763e31c5594f11d79f984257fbe56599e15829c73c8d1448361e2173f39ebce04e666027251b5b39a1efa2fb4060d94b70f818359f644ca816959bac4345d9b40ff981729bb94600a2409170e102a745c2650dab9048c7bdad78c7a52dec4d06c508997f8ea49f8e7e6997230c896d7155a0d8ee395ba93b19c86e9e377c262fbd75da17996b3b26a2dfb10d07396df7ba684693beb91e582ab03dab07a0c3ad2195fdef6ab66db057900a6fa1b80c3dba632f37607f66fc0924f24cce39e20e8242c4e159107bd967929e44fb60f6c02a89393b1cb103a8fd4626ba3c2bf56c05401d54020e450826ce477f8267236d8d2ff6f56f0cc39e5651a72da3df235b9c9b862c81006b7eb3f58b40545bd88d38857190e34bd0f48662663cb2e170506f06ca3513889414783972ea696a7ccb3513375fbf1057e884dffb0b5b7186955581d8e2eef4180bc67ec2b1889318d1e5f0b7c636d571854bcc1bd11edebaf63be42511e900ff0733912176e640d51579f27270df63c7fee869a01bed579839ff001b6ae54696356cf82699ca62c3ffaa1980f12f851c14652e08cb93ab322abea50751981d8015d61f837470f8e533905bb422517f71791ddb186e770a82bb0d8b3da3a05c4045281fbf2c0e93f45169ef6b41ab0d6fe88d40b95f1bb04ffff763e489631b4b6d81a39a7892585c75dcafc932fb56ebf79d2c75d6"]}, @typed={0x8, 0x8d, 0x0, 0x0, @uid=r7}, @typed={0x4, 0x56, 0x0, 0x0, @binary}, @typed={0xa, 0x38, 0x0, 0x0, @str='eth0{\x00'}, @nested={0x236, 0x6e, 0x0, 0x1, [@typed={0xfb, 0x7c, 0x0, 0x0, @binary="c244144df3411a7a8bc6d9ac178f0f16b6111648ac101d8d2417b684779c4e65ac629ffe49362654041515a220237cda1a978b3b9d68ee8a65e07bc7a208321736bacf31efadca08a46adea416d2f92c8b1caa7685be55f79ee9ce3bf0f58fcb5098995fdb2d8d9dc4b160befeaa3b2ada43c6f10df0e3b5ff25f8e47bd85be67a77ff49985a0e97bef6a934c2b1c6430604ace73312c83f4dc19888a809683df6a2428174751ebf4fa11856057d0bd99e34e968074287a79b178f14539f86f428f3e886b207708db9dab03da0f77266db5b43b90b61237cdbe7d265ef8000295efe18a6f200a8f33b0f7bb6918223d4c9a04be11e265e"}, @typed={0xc, 0x42, 0x0, 0x0, @str='cgroup2\x00'}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="1581a7995ce63c337283c9d6f926d4e7a3199ac0eb3412c16f983f6d7f916e5537b43ad9a8e3232148e996c051025cf8890afa25aee73cb52c8db92dfdf775fcc3b0f3c1f21bfbd08b71c8bcc788312b", @typed={0xc, 0x13, 0x0, 0x0, @str='cgroup2\x00'}, @generic="9dad9abaa68deff65983d0ed7d901e7bd977515fbe967e0452343088586c346ccb47343589c9fc9941d00ae16dcbb266af708e8fc0c3974a95a134bf9afe8996d8bffcf0b35be2251ea016122111d0612ac398c85029cbdb272fbac76da58e0ae6dda78769b3a298a1dddcf6982265e6e4e4b2c21a6413", @generic="6bcd67d82b6e31ed07c4f736d8bb53d4a14310006cee3c3b0094be93023eaaddd31c065175c19cb7d261763e11aa3e2117290f78292973f7e84ae35f4809b446d38afb"]}]}, 0x1388}, {&(0x7f0000001b80)={0xb4, 0x3e, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0xa3, 0x4b, 0x0, 0x1, [@generic="da1586841279c1090a9e2c185eaf897e413f25809086187c38e1cf8e63c3c4294d12594f52b74526f543f6de80bf644cb42098509210312190ad43490cf79e0e2c6f3f2e995663dfab0f875190dfbad81c5dc14232000828ef9bf024e75952957d98a9c4c0b302c3e1c14bc5da1dc50ef79dea2b47a53b9712e983da72e62663fc3057554eede1546f9dc66ad7ef9f757f402b", @typed={0xc, 0x24, 0x0, 0x0, @u64=0x3f}]}]}, 0xb4}, {&(0x7f0000001c40)={0x10, 0x40, 0x100, 0x70bd25, 0x25dfdbfe}, 0x10}, {&(0x7f0000001c80)={0x38, 0x16, 0x100, 0x70bd28, 0x25dfdbfe, "", [@generic="e2a118f5112260bae268ae5188b3a649d9d0e282cd3533798fc2ffa4fbcf151390938e3f495f"]}, 0x38}, {&(0x7f0000001cc0)={0x12c, 0x13, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@generic="a33f27a23043babb6891038c91ed0a18653ec81780b54e1018225b8d35e009cd6370d7c6259c06a16b03de8c1855fba7e013c2599c82614e899bf80f3aa0c156aaafd3fb0544cb50104672", @typed={0x8, 0x63, 0x0, 0x0, @u32}, @typed={0x12, 0x87, 0x0, 0x0, @str='memory.events\x00'}, @nested={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @fd=r8}]}, @generic="84361b0d636cef18bfb1eb995592663936a2968956ef03e32a1343da5504fef8b3ebd0dd91087199dc51b947687860c6d33f3b60e6918af6d052afaa4e88fa0afe58e5d657d723fbcf877491c43d15bd5cce94ff6c6404d03122100fd129d5c1f7ed20e44a01fb6ffaca6f1fd1532a55784c0ad6614e82b94f6e38bbbf346aff2434b527061bc8f941ed72fcd2e8ed2cbdaecd7804db3f298a05c46cb8f86cb2054a69e01a4f85c077"]}, 0x12c}], 0x8, &(0x7f0000002740)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="7b28b56d3300717db29e1dbd", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r21, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r28, @ANYRES32=r0, @ANYRES32=r29, @ANYRES32, @ANYRES32=r31, @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r41, @ANYRES32=r0, @ANYRES32=r51, @ANYRES32=r52, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r54, @ANYRES32=r56, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x100}, 0x4000000) link(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000040)='./file0//ile0\x00') r57 = socket$packet(0x11, 0x3, 0x300) fcntl$getflags(r57, 0x41f) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 13:45:53 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3ec0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 435.882193][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.041188][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.424223][T11403] can: request_module (can-proto-4) failed. 13:45:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x11, &(0x7f00000002c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r6, 0x0, 0x40, 0x0, 0x400}, &(0x7f0000000200)=0x14) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(0xffffffffffffffff, r7, 0x0) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x11, &(0x7f00000002c0)={r9}, 0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007) recvmsg$can_bcm(r10, &(0x7f0000001400)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000001300)=""/96, 0x60}], 0x4, &(0x7f0000001380)=""/76, 0x4c}, 0x22) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r9, 0x0, 0x40, 0x0, 0x400}, &(0x7f0000000200)=0x14) sendmmsg$inet_sctp(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x20000800}], 0x1, 0x0) 13:45:54 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x803e, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:54 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:54 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x16c) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x12009, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000380)=0x9) r3 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r2, 0x200000000002) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x7e0fdecf, @ipv4={[], [], @local}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x0, @local}], 0x4c) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, 0x0) renameat2(0xffffffffffffffff, 0x0, r1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) dup(0xffffffffffffffff) 13:45:54 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:54 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r5, &(0x7f0000005000/0x1000)=nil, 0x3000) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000000)=""/68) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000001c0)=""/42, &(0x7f0000000100)=0x4b4e1f2a1f14204f) 13:45:54 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:54 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:54 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:54 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@ng={0x4, 0x2, "43e51cb0a5b16c"}, 0x9, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e21, 0x7, @remote, 0x6}, {0xa, 0x4e24, 0x3, @mcast1, 0x101}, 0x1f, [0x0, 0x8, 0x7ff, 0x8, 0x10, 0x3, 0x5, 0x7fff]}, 0x5c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0000000009000000000000000a0000000000000000000000000000000000f9d82728367dcfae7c42de7b74e295e239aa3647d6eca9f8ef7290f53303c2ac01614c6bc4f987d2333a5e646856c258efc196edb31e67b0674e12e3c59bae5f1136121e0db7b61f296617af311870d53db8840180c86c565ba3a6"], &(0x7f0000000040)=""/189, 0x3e, 0xbd, 0x8}, 0x20) 13:45:54 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc03e, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:55 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0506107, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0x0, 0x5, "82f971352c5cf200dd2a25ad30738ee436a160dea5fb494d72be3e7b20d6d421", 0x2, 0x3, 0x8, 0x1, 0x1ff, 0x5, 0x0, 0x8000, [0x10001, 0x1ff, 0xf47e, 0x5]}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x180, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x600002, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc0506107, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000001240)={0x60, 0x8, 0x4, 0x2000, 0x15, {r4, r5/1000+10000}, {0x4, 0x2, 0x40, 0x3f, 0xa9, 0x2, "ab880fdd"}, 0x7, 0x4, @userptr=0x2, 0x7, 0x0, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f00000000c0)={0x8, 0x1}) getpeername$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000012c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[]}}, 0x4000080) [ 437.757454][T11429] syz-executor.3 (11429) used greatest stack depth: 9760 bytes left 13:45:55 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x800, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="dd69feff2587227c445deb4a0a2a4dc409bb227d81db267306001cfabfe691136e1330d44519fdd8d27883970828a6ea59d3c24dde49e0917e5796618a75e7a719a1067e59d4bb9af9aa9dc16dba534f458fe757999285cb37bd9d887a0bb820686b470f5f6d55ab11d6e4b64e2700f1b393a45028dfddad080938e6ed8546763be66378c29e1fa083e85c83a28b09907475481e475aecc8f08264ebbfb3d6b498e6fa195f6446fa63a2be4dc161ed27", 0xb0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0xfffffff7) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 13:45:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r3, 0x29, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x118, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @rand_addr="da96355f50bcceccb408d261528339b3", 0x80}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d3bebc5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5c5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x20000814) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xe8, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="cbf91149cf77a6ad55ec2c08fa874895"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd82b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020000000a000000000000000000000005000000009a03fb750000000a0000000000000000000000000000000000ffffac14140000c300000000000001"], 0x3d}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 437.909354][T11464] tipc: Failed to obtain node identity [ 437.921684][T11464] tipc: Enabling of bearer rejected, failed to enable media [ 438.028785][T11464] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 438.063404][T11464] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 438.069137][T11470] IPVS: ftp: loaded support on port[0] = 21 [ 438.083771][T11464] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 438.094042][T11473] IPVS: ftp: loaded support on port[0] = 21 [ 438.138024][T11464] EXT4-fs error (device loop0): ext4_fill_super:4488: inode #2: comm syz-executor.0: iget: root inode unallocated [ 438.203718][T11464] EXT4-fs (loop0): get root inode failed [ 438.266879][T11464] EXT4-fs (loop0): mount failed 13:45:55 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x16c) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x12009, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000380)=0x9) r3 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r2, 0x200000000002) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x7e0fdecf, @ipv4={[], [], @local}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x0, @local}], 0x4c) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, 0x0) renameat2(0xffffffffffffffff, 0x0, r1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) dup(0xffffffffffffffff) 13:45:55 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xff00, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 438.326632][T11479] tipc: Failed to obtain node identity [ 438.343207][T11479] tipc: Enabling of bearer rejected, failed to enable media 13:45:55 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xff0f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:55 executing program 0: ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r1, r0) 13:45:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:56 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x1517f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 438.886530][T11473] IPVS: ftp: loaded support on port[0] = 21 13:45:56 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xfff, 0x40}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x100000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) [ 439.211549][T11505] IPVS: ftp: loaded support on port[0] = 21 [ 439.518430][ C0] net_ratelimit: 20 callbacks suppressed [ 439.518440][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.530139][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:45:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x1ff) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x36, 0x0, 0x80000003) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r6 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x0, @tid=r6}, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000500)) r7 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40)) r9 = socket$inet6(0xa, 0x80000, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) 13:45:57 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:57 executing program 0: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @local}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x0, @remote, 0x8}, @in6={0xa, 0x0, 0x80000001, @mcast2}]}, &(0x7f0000000180)=0x10) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x4}, 0x16, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x2, 0x1, 0x3, 0xff, 0x0, 0xd179, 0x20800, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ae00, 0x0, @perf_config_ext={0xf303, 0x2}, 0x2000, 0x6f18, 0x963, 0x4, 0x81, 0x4, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000002c0)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x7, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x98090b, 0x7, [], @p_u32=&(0x7f00000000c0)=0xffffff00}}) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000280)) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x2, 0x16000) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000340)={r0, 0x1, 0x9, 0x0, 0x9, 0x6}, 0x14) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000001c0)=0x3) 13:45:57 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x800, 0x4) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="dd69feff2587227c445deb4a0a2a4dc409bb227d81db267306001cfabfe691136e1330d44519fdd8d27883970828a6ea59d3c24dde49e0917e5796618a75e7a719a1067e59d4bb9af9aa9dc16dba534f458fe757999285cb37bd9d887a0bb820686b470f5f6d55ab11d6e4b64e2700f1b393a45028dfddad080938e6ed8546763be66378c29e1fa083e85c83a28b09907475481e475aecc8f08264ebbfb3d6b498e6fa195f6446fa63a2be4dc161ed27", 0xb0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0xfffffff7) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 13:45:57 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0058a41f6a05001a227faa51f989223ebbd63f"]) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0506107, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x9, 0x7e8f2ea1, 0x400, 0x4000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 13:45:57 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x33fe0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 439.757996][ T8068] tipc: TX() has been purged, node left! [ 439.838088][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.843914][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.849772][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.853939][T11530] IPVS: ftp: loaded support on port[0] = 21 [ 439.855531][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:57 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x34000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:57 executing program 0: mmap(&(0x7f0000542000/0x2000)=nil, 0x2000, 0x7, 0x4154031, 0xffffffffffffffff, 0x1000) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0xffffff4d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000064c0), 0x400000000000254, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x11, &(0x7f00000002c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r6, 0x0, 0x40, 0x0, 0x400}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000680)={r6, 0x74, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x7, @mcast1, 0xe39}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x400, @loopback, 0x80}, @in6={0xa, 0x4e21, 0x20, @mcast1, 0xffff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000700)={r7, 0xaa, 0x3, [0xf800, 0x0, 0x8000]}, &(0x7f0000000740)=0xe) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = dup3(0xffffffffffffffff, r3, 0x0) r9 = dup2(r8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000000)=0x10000, 0x4) ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, &(0x7f0000000200)=0x1000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff1a) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYBLOB="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"], &(0x7f0000000140)=0x2) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r13, 0x40086602, 0x400007) sendmsg$IPSET_CMD_FLUSH(r13, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r12, 0x400000}, &(0x7f00000001c0)=0x8) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000002c0)=0xf6, 0x2) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 13:45:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:57 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x87104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 13:45:57 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x40000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 440.370214][T11556] overlayfs: failed to resolve './file1': -2 [ 440.408007][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.413827][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:57 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x400300, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 440.638278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.644261][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:45:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x1ff) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x36, 0x0, 0x80000003) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r6 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x0, @tid=r6}, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000500)) r7 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40)) r9 = socket$inet6(0xa, 0x80000, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) 13:45:58 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x1000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:58 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x22, 0x0, 0x74a2a0015d1b65b9) close(r0) 13:45:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:58 executing program 0: mmap(&(0x7f0000542000/0x2000)=nil, 0x2000, 0x7, 0x4154031, 0xffffffffffffffff, 0x1000) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0xffffff4d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000064c0), 0x400000000000254, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x11, &(0x7f00000002c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r6, 0x0, 0x40, 0x0, 0x400}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000680)={r6, 0x74, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x7, @mcast1, 0xe39}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x400, @loopback, 0x80}, @in6={0xa, 0x4e21, 0x20, @mcast1, 0xffff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000700)={r7, 0xaa, 0x3, [0xf800, 0x0, 0x8000]}, &(0x7f0000000740)=0xe) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = dup3(0xffffffffffffffff, r3, 0x0) r9 = dup2(r8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000000)=0x10000, 0x4) ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, &(0x7f0000000200)=0x1000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff1a) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYBLOB="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"], &(0x7f0000000140)=0x2) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r13, 0x40086602, 0x400007) sendmsg$IPSET_CMD_FLUSH(r13, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r12, 0x400000}, &(0x7f00000001c0)=0x8) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000002c0)=0xf6, 0x2) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 441.130180][T11588] overlayfs: failed to resolve './file1': -2 13:45:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x1ff) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x36, 0x0, 0x80000003) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r6 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x0, @tid=r6}, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000500)) r7 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40)) r9 = socket$inet6(0xa, 0x80000, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) 13:45:58 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x2000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:58 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x1ff) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x36, 0x0, 0x80000003) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r6 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x0, @tid=r6}, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000500)) r7 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40)) r9 = socket$inet6(0xa, 0x80000, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) [ 441.646762][T11607] overlayfs: failed to resolve './file1': -2 13:45:59 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:45:59 executing program 1: mkdir(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:45:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0xb8, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @rand_addr="16f8bcd383af9b1577def13edad6b8bf"}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0x18, [@CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}]}, 0xb8}}, 0x0) 13:45:59 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x4000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 442.164891][T11627] overlayfs: failed to resolve './file1': -2 13:45:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x1ff) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x36, 0x0, 0x80000003) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r6 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x0, @tid=r6}, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000500)) r7 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40)) r9 = socket$inet6(0xa, 0x80000, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) [ 442.220492][T11633] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 442.258122][T11633] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 442.331487][T11639] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 442.366411][T11639] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 13:46:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50500"/20, @ANYRES32=r0, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080002"], 0x3}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x320e, 0x7) r5 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r5, 0xc0506107, 0x0) write(r5, &(0x7f0000000100)="c6638e8b7eceb528ea4ea90b9ba620b75ae2653949f13608105e1e04727ba849202dac959c2938c5d492917ede386e11c18615246f7437603f9713d6b82ee4766621be3fa20c46e298060d50306d268c81a79afaa798229b7500842b6af8082f0bbcdc26bbdf1c1c666ed7bbb5d5949a68a44a12bce1023001c08aec0aec", 0x7e) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x420002, 0x0) sendto$rxrpc(r6, &(0x7f00000001c0)="42525ffb7ad56aa425dc5bbfec93c7b40d1521ccf6038e98f433956353eed11eb0fbe62380c23ad939fefe5044d6fee8056d3bd11e4b80630bd7dd91cec3d7f58e7776e56996618fd7d5105a9d5dac5fea480df67a3eed4ae082b759a79054540d1cfff7eadc024599398bfcfcf90412d7a7283ce77cd648f79b1a", 0x7b, 0x4000000, &(0x7f0000000240)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) 13:46:00 executing program 1: mkdir(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x7f5240) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x505100, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0xffff, 0x0, 'queue1\x00', 0x8fce}) 13:46:00 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x5000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:00 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8001, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000009092d995ab57f85f2b73e3f10001004d010000000000000000007a0000000000fff6d2a2299748aeb81e1b00b10efd9a000001000000000001ffffff", 0x48, 0x10000}], 0x3, 0x0) rt_sigreturn() r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x138, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='nr0\x00', 0x8, 0x3f, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000280)=@newtaction={0x870, 0x30, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{0x50c, 0x1, @m_police={0x508, 0x8, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x45c, 0x2, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x9, 0x100, 0x9, 0x80, 0x6, 0x3ff, 0x1, 0x5, 0xcc, 0x1, 0x8000, 0x8, 0x3, 0x4, 0x10001, 0x20, 0x8874, 0x800, 0x2, 0x6, 0x82, 0x6, 0xf6a, 0x6, 0xac3, 0x3ff, 0x7c9, 0xffffff81, 0xffffffe0, 0x3, 0x7ff, 0x7fff, 0x7, 0x8001, 0x8, 0xd06b, 0xffffffff, 0x9, 0x101, 0x6, 0x5, 0x8, 0x72, 0x0, 0x5, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x6, 0x200, 0x3f, 0x7, 0x20, 0xffffffff, 0xb2b, 0x2, 0x2, 0x7a64, 0x7fffffff, 0xfffffff7, 0x5, 0x80000001, 0x7, 0x401, 0x5d2, 0x16, 0x947, 0x7, 0x101, 0x0, 0x0, 0x1, 0x1f1, 0x1, 0x1, 0x4, 0x7f, 0x5, 0xffff0001, 0x3ff, 0xfffffffc, 0xffffff00, 0x8, 0x88, 0x5, 0x9, 0x1, 0x7, 0x80000000, 0x1, 0x7fffffff, 0x3, 0x8, 0x6, 0x8, 0x7a5, 0x7, 0x2, 0x4, 0x520, 0x668, 0x7fffffff, 0xfffffff8, 0x7f, 0xfffffffa, 0x1, 0x1ff, 0xffffff6c, 0x80, 0x10001, 0xfe000000, 0x9, 0x10000, 0x890, 0x40, 0x5, 0x80000001, 0x0, 0x6, 0x5a54, 0x0, 0x75, 0x40, 0x5, 0x6, 0x7, 0x6, 0x64ed, 0x7ff, 0x3, 0x3, 0x9, 0xb27, 0x71, 0x1, 0x1, 0x8000, 0x4bf, 0x6, 0xa495, 0x80000000, 0x101, 0x80000001, 0x2, 0xdd45, 0x2, 0x4, 0x5, 0x8000, 0x13, 0xffffffc0, 0x7, 0x7, 0x8, 0x5, 0x400, 0xfffffffc, 0x9, 0x7ff, 0xa5de, 0xa2, 0xac5, 0xfffffffc, 0x3f, 0x10001, 0xffffffff, 0x7, 0x1, 0x4, 0x3f, 0x0, 0x3f, 0x3ff, 0x80000000, 0x6, 0x9, 0x2, 0x5, 0x5, 0x401, 0x80000001, 0x3, 0x2, 0xffff8001, 0x6, 0x200, 0x4dc8c7af, 0xffffffff, 0x7fffffff, 0x40, 0xc00000, 0x7, 0xfd, 0x80000000, 0xfffffffb, 0x6, 0x2, 0x3, 0x5, 0x6, 0xfffffffb, 0x200, 0xffffffff, 0xadce, 0x4, 0x0, 0x2049, 0x200, 0x400, 0x5, 0xcb45, 0x9, 0x9, 0x2, 0x84, 0x6, 0x7, 0x6, 0x200, 0x81, 0x7, 0x7fff, 0x6, 0x203e00ef, 0x5, 0x8, 0x401, 0x9, 0x8, 0xc8, 0x4, 0x3f, 0x1, 0xfffffff8, 0x3, 0x8, 0xfffffff7, 0x8, 0x0, 0x9, 0x7, 0x9, 0xfffff60d, 0x1ff, 0x9, 0x0, 0x2, 0x8001, 0x9, 0x7, 0xfffffff8, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x800, 0x45, 0x8000, {0xff, 0x1, 0x7, 0x7fff, 0x8001, 0x80}, {0x8, 0x1, 0x7, 0x1c, 0x0, 0x3}, 0x5, 0x1580981f, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, {0x9c, 0x6, "29e6b4a3fddf18e88e10e94473e5706e8b749a7efe2a579b12ba0b7c3e77a910450654e05c6722d6ed06fdeb1a9d5c24656944a0b70b266750e4bbd2831c084b50624dd3b606d4418d026ab256aee2136a93842667c598264024756afd25aaca9f08d82db7c3f3201a79ad9a16a6fbcc1d9f0001986461e12503af268cb748cd2c568d4bd8d3f6e653f5264c3b9849efd17722fc5e106c92"}}}}, {0xac, 0x1, @m_ife={0xa8, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x4}]}, {0x4d, 0x6, "927c9ef8397bf6b4eadbe8f1aed38c2a9ddd368f5dcfb5321e7d722118d7bc734611db6ef53ff97c7e610a63d30b868337f686bf372e2c087301ba82b4e4940d7537e519234e5fe2d3"}}}}, {0x178, 0x1, @m_ipt={0x174, 0x17, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x140, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xaf, 0x6, {0x4, 'filter\x00', 0xc1, 0x0, "8f5c89582c7154547ed2d85d366adee15f2b73cca681519e93499be9ebaf94703039b24b22d0bc374b06f0a9a2bd982ded92159a76f0bad8f6286cbf07936fd81dbe45ffe74e344535d430a4c986022c5fafc89963a49fe055ec6e7af67455fc85057b8853f3644abaff4ae6b062d8c10de90325915e5f92b6adafe8480c626221768a644d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x25, 0x6, "7a71ec79341c8a39eedacecc31c829a41d6239654f5b7fb4832f3d76b3ff610739"}}}}, {0x12c, 0x1, @m_vlan={0x128, 0xd, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x50b}]}, {0xf1, 0x6, "83bebe96853f9ad8c7d0d5819a5bd3b235c45841cbe75c178d6a03a6b608d7ea52f41217e554ec0b36672a1b0d9998d9a6af76ff263057446c485904246b7b4ed484a0b9b0fc932942259118d34e0d01e767bda71da60d49de3f5e70bd8056ed07df57557a00342b073f9bc091a0484a22b9a7492bb733353ebddb4e300ad9a90df9b59f1b038e15444e7e0de33e044c154539da65041a29c748f6e55a3debcff9f43108ca60b34ba3bb854d578f72b13863365a5eeb3f8c17fe52c2523c25bdda78acaf7df2f3f8f66882e31504fdef20e5a5140b36a7153c1b2c4c110c54d09f4af63f42e029dc9d789558d7"}}}}]}, 0x870}, 0x1, 0x0, 0x0, 0x20008011}, 0x800) 13:46:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0x0, 0x13, 0x0, "84d30394288b13718a808705ec20560f09a0d4039209b4662beb3cebb69f47073d831bedbeec5195d89ce920be45c719dbdf4c064be90e0cd020a4f725ac820c2c84467e207b03caf33a6d248d7337f6"}, 0xd8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600), &(0x7f00000007c0)=0xe, 0x80000) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000800)=0x2, &(0x7f0000000840)=0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@timestamp], 0x1b7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x5, 0x1ff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x2869, 0x4, 0x802, 0x7, 0x19, "ad6dddebff4630e70085bd6dde074e02e7a649"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000240)=""/235) sendto$inet(r0, &(0x7f0000000640)="e0", 0x1, 0x0, 0x0, 0x0) 13:46:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000005, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x5, 0x0}}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) dup2(r0, r2) [ 443.524441][T11659] overlayfs: failed to resolve './file1': -2 13:46:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) listxattr(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r5, r6) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000300)=0x6) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e8996121abf2c2524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3d981d196f1b7256c49aac96b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224b800"/301], 0x12d}}], 0x49f, 0x0) recvmmsg(r7, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000003c0)=@hci, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37}, {&(0x7f0000000480)=""/89}, {&(0x7f0000000500)=""/152}, {&(0x7f0000000740)=""/112}, {&(0x7f00000007c0)=""/205}], 0x0, &(0x7f0000000a00)=""/60}, 0x9}], 0x4000000000003bf, 0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r10, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) recvmmsg(r10, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) recvmmsg(r11, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r12, 0x0, 0x0) r13 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r12, r13) r14 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r14, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r14, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r14, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) 13:46:00 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x6000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 443.648972][ T8068] tipc: TX() has been purged, node left! 13:46:01 executing program 1: mkdir(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 443.758538][ T8068] tipc: TX() has been purged, node left! [ 443.764544][ T8068] tipc: TX() has been purged, node left! 13:46:01 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:01 executing program 3: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) sendfile(r0, r0, &(0x7f0000000200), 0x87) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f00000002c0)="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", 0x1000) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x70, 0x0, 0x7, 0x9, 0x8, 0x0, 0x8b, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xe84, 0x4}, 0x200, 0x8, 0xf5e, 0x3, 0x9, 0x2, 0x7}, r1, 0x0, 0xffffffffffffffff, 0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0xffffffffffffffff) r4 = socket$inet_dccp(0x2, 0x6, 0x0) sendfile(r4, r0, &(0x7f0000000040), 0xfffffffffffff6b1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x280000, 0x0) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000001340)=""/177) [ 443.925843][ T27] audit: type=1800 audit(1579441561.248:62): pid=11683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17001 res=0 13:46:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x6eba, 0x7, @name="2b4f3c01adefaf4d9ede18c11074b0b08d0c344bb4fbdfaf4d6a06778d7bbfc2"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100706965000c0008000800010000000000"], 0x38}}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x6, 0x4) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000180)=@rc={0x1f, {0x9, 0x3, 0x2, 0x20, 0x1f, 0xaf}, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="2ab9c55e528919b9785e7a1e0fce5a3273fff576caad923ba26d4fdef2c1455a18f62e6a89bdcc6c71a5a6d87f0be4", 0x2f}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000280)="b500fc441038ffb5fef4608d24ca0e43b86b2c9d69d952a3ec0c064865d543aa1ec80a7cf79f6d2c05f37fb9c68a9c93759f5efc5adc", 0x36}, {&(0x7f00000002c0)="5deedb161339f78aeb458b309943d0a3ce1333803afdb408608998ddbebd6b6bc6d37ed587d83b568192e9dc1d4118d6a0ff98edfb578e078db833f174b409e3d3d0c532bbf345b201ef561ff491b749f13a2082503fc58178084efb107e3aba26911d24a54bfe5213d61ba842e34569c1343ec7946e939b6434426eed054f1e0cd824f74fd71b3eda46a691db6eefab9a078b198105471782ca3b0febc5016f048aa385e0a9fd9131f55efa2477c2860e4edc", 0xb3}], 0x4, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x66}}], 0x18}, 0x0) 13:46:01 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/99) setrlimit(0x7, &(0x7f00000001c0)) memfd_create(&(0x7f0000000040)='em1ppp1nodevcpuset\'vmnet1self\x00', 0x0) [ 444.039087][ T8068] tipc: TX() has been purged, node left! [ 444.052729][T11686] overlayfs: failed to resolve './file1': -2 13:46:01 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x8000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:01 executing program 3: socket$inet(0x2, 0x2000000000003, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) io_setup(0x2346, &(0x7f0000000100)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 13:46:01 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:01 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xa000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000080)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r1, r2) r3 = dup(r0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000100)={0xb, 0xff, {0x50, 0x6, 0x39d3, {0xebf4, 0xc000}, {0x401, 0x26}, @const={0x0, {0x8, 0xfffa, 0xf9f, 0x4}}}, {0x52, 0x6, 0x9, {0x9, 0x6}, {0xff, 0x5}, @const={0x6, {0x3, 0x499, 0x4, 0x5}}}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfe3b, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) [ 444.557987][ C1] net_ratelimit: 20 callbacks suppressed [ 444.557997][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.569550][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.798719][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.805212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.812009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.818516][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.850174][ T27] audit: type=1804 audit(1579441562.118:63): pid=11685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 [ 444.901498][ T27] audit: type=1804 audit(1579441562.208:64): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 [ 444.925764][ T27] audit: type=1804 audit(1579441562.218:65): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 [ 444.958309][ T27] audit: type=1804 audit(1579441562.248:66): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 [ 444.983539][ T27] audit: type=1804 audit(1579441562.298:67): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 [ 445.011126][ T27] audit: type=1804 audit(1579441562.308:68): pid=11685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 [ 445.035931][ T27] audit: type=1804 audit(1579441562.358:69): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 13:46:02 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) listxattr(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r5, r6) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000300)=0x6) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x12d}}], 0x49f, 0x0) recvmmsg(r7, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000003c0)=@hci, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37}, {&(0x7f0000000480)=""/89}, {&(0x7f0000000500)=""/152}, {&(0x7f0000000740)=""/112}, {&(0x7f00000007c0)=""/205}], 0x0, &(0x7f0000000a00)=""/60}, 0x9}], 0x4000000000003bf, 0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a77305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a29b17dc1245d4c96f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3d981d196f1b7256c49aac96b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f02e0c80f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224b800000000000000000000400000000000000000ac005381badc2f074a0deba03fcf6717503db10cc0a859de35768b4aed9d5408125a5751329bbdcca1906c81e26a6d8f36e013f4476a1ae09abc1299f83c6e9d27d604260c3b2968f13c22856b43a922087b264b241258e16aa8d53f8dfa8c961b8bf49ad5abf56d90c802b676d88ee306fb39c080fede79e9a5136698c39587fd28d87e692409ead25515315fc614b724758cf9c2459008b2c1fe9f0e40f1317b3022bca6f6130f02d7cc43d775f425efea382ac3d5988023dedb6aad4c61256421ec3b2e6f69654028622d67580007862b785ea4c4538e9836f312e71b57756130065da07b8a3acc8ffdcf86705630dab697be1cabf397e68fe991e3e0b1cd6114ca8329fd3f4b201e4becaafc21574e22fd5568ec2069190293f5399573b4275fd6f406eb226d0083e37052cb90bf46060a2be86c3a610185c090bb7b55a5a101c4732bbd75bd9d2ed4736eb3a15c9c08a5445bf01a850a6149c662e4fc0e4eb659e5907b5c07baed19a8ea64958ab8378d7f1239958035a9599f0fab4c1b4f40b87bcf883936d8eb7b2f93753e5ec860b89004b4086e10a0f6b963e4d7eb815116f1f9128447bca098ee16dfd6b7fc5e613eebaf12bb3a5f09e57222327f8ae847d263c6c84a48cb364c44b740f8485fe945e9811ff03b96138954919be005c8ed43eb1bcc454d21522119b724ee4ad40bb032a62a"], 0x18}}], 0x1, 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r10, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) recvmmsg(r10, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) recvmmsg(r11, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r12, 0x0, 0x0) r13 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r12, r13) r14 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r14, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r14, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r14, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) 13:46:02 executing program 4: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)='%%.em1keyring(-posix_acl_access\x00', 0xffffffffffffffff}, 0x30) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x10000, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000006eda98866e0409e920c35000de210b174a851623eb680e42d0d4a25d0585"], 0x25) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=@random={'btrfs.', 'pagemap\x00'}, &(0x7f00000003c0)=""/30, 0x1e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x114) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000002c0)={0x1, 0xedd, 0x2, 0x3, 0x1, "8f7442849d98b4b6d90ce116b54283baa5f062", 0x7, 0x80000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc530000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae343d74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cba0000000871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) [ 445.061646][ T27] audit: type=1804 audit(1579441562.358:70): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir619004587/syzkaller.1QdaHo/27/bus" dev="sda1" ino=17002 res=1 13:46:02 executing program 3: socket$inet(0x2, 0x2000000000003, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) io_setup(0x2346, &(0x7f0000000100)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 13:46:02 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:02 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x11000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000004c0)="1d99", 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000180)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:46:02 executing program 4: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)='%%.em1keyring(-posix_acl_access\x00', 0xffffffffffffffff}, 0x30) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x10000, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000006eda98866e0409e920c35000de210b174a851623eb680e42d0d4a25d0585"], 0x25) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=@random={'btrfs.', 'pagemap\x00'}, &(0x7f00000003c0)=""/30, 0x1e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x114) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000002c0)={0x1, 0xedd, 0x2, 0x3, 0x1, "8f7442849d98b4b6d90ce116b54283baa5f062", 0x7, 0x80000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc530000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae343d74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cba0000000871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 13:46:02 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:02 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:02 executing program 4: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)='%%.em1keyring(-posix_acl_access\x00', 0xffffffffffffffff}, 0x30) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x10000, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000006eda98866e0409e920c35000de210b174a851623eb680e42d0d4a25d0585"], 0x25) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=@random={'btrfs.', 'pagemap\x00'}, &(0x7f00000003c0)=""/30, 0x1e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x114) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000002c0)={0x1, 0xedd, 0x2, 0x3, 0x1, "8f7442849d98b4b6d90ce116b54283baa5f062", 0x7, 0x80000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc530000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae343d74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cba0000000871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 13:46:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) listxattr(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r5, r6) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000300)=0x6) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x12d}}], 0x49f, 0x0) recvmmsg(r7, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000003c0)=@hci, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37}, {&(0x7f0000000480)=""/89}, {&(0x7f0000000500)=""/152}, {&(0x7f0000000740)=""/112}, {&(0x7f00000007c0)=""/205}], 0x0, &(0x7f0000000a00)=""/60}, 0x9}], 0x4000000000003bf, 0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r10, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) recvmmsg(r10, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) recvmmsg(r11, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r12, 0x0, 0x0) r13 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r12, r13) r14 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r14, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r14, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r14, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000003440)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) 13:46:03 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f510100, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 445.757988][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.763896][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 446.078027][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.083818][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:03 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="12f57aa3e70f98457c3a4a5a30a8ade350072389714976db0ad830860f3fe1367896771e37a5c156747e06e829ee", 0x2e}], 0x1, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x4000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, r3}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x60000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000001c0)={r5, 0x80000, r6}) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xe95c, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) recvfrom(r3, 0x0, 0x0, 0x20002000, &(0x7f0000000240)=@llc={0x1a, 0x0, 0xd, 0x80, 0x6, 0x6, @dev={[], 0x1a}}, 0x80) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1eb439dc9d5dba2f, &(0x7f0000000000)=0x81, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x6, 0x81, 0x2, 0x20, 0x0, 0x7fff}, 0xc) 13:46:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r2, &(0x7f0000000000)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000309000/0x1000)=nil, 0x1000}, 0x1}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r3, &(0x7f0000000000)=""/109, 0x6d) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r4, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) 13:46:03 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x803e0000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x639a3ee4, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040808}, 0x84) writev(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)="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", 0x449}], 0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000800)={0x3, 0x3, 0x4, 0x4000, 0x7ff, {0x77359400}, {0x3, 0x1, 0xc7, 0x3, 0x40, 0x7b, "dbc0b56d"}, 0x8001, 0x3, @offset=0xc5, 0x1ff, 0x0, r3}) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000100)=0x2, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000980)='/dev/vsock\x00', 0x88001, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f00000009c0)={0xfa, 0x6000}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@rand_addr=0x3b4, 0x4e21, 0x800, 0x4e20, 0x832, 0x2, 0xa0, 0xa0, 0x3b, 0x0, 0xee01}, {0x3d, 0x1, 0x4, 0xffff, 0x3, 0x3, 0x81, 0x5}, {0x100000000, 0xe6, 0x7f, 0xdc16}, 0x7, 0x6e6bb3, 0x1, 0x0, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0x2, 0x3, 0x5, 0x3, 0x5, 0xff4}}, 0xe8) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r6, 0xc0506107, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) flistxattr(r6, &(0x7f0000000740)=""/131, 0x83) 13:46:03 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc0000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 446.424267][ T27] audit: type=1804 audit(1579441563.748:71): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir474687387/syzkaller.MBbDsw/162/bus" dev="sda1" ino=16551 res=1 13:46:03 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20100, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f00000000c0)='[mime_type}lo(\x00', 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x163080, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000a0ffffffffffffd6228d6fdd02bd780000", @ANYRES32=r3]) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000340)={@local}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x65) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x1f}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x7f, {{0xa, 0x0, 0x0, @loopback, 0xfffffff9}}}, 0x88) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) [ 446.491148][T11795] Unknown ioctl 1074835115 13:46:03 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc03e0000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 446.572989][T11803] Unknown ioctl 1074835115 13:46:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10) pwrite64(r1, &(0x7f0000000200)="bbb5f561b6f9b8e9720713fded79f465da79cf84f8806c813d0a3e125345a6de11b9344bb6b6ebd9e7c8c6af163ca6152ae8666b911ef5df98965eb527a967397d8228c29cf73e2abe989e9feba4573386b5605a5c6c36be5121bb44ef2dde8321785f270f", 0x65, 0x6) creat(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x802848, &(0x7f0000000140)=ANY=[@ANYBLOB="757b7271756f74612c7573bb89ca4b2351f0726a7175cd74613d73797a2c7461696c733d6f66662c7365636c6162656c2c0060ed34a719c640a582073fd8fba5ea64322cc235fa296978d8203408ccc39e05624c2ce50a5136b83f07689dade569d2ec27c4"]) 13:46:04 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x9e) dup2(r1, r0) 13:46:04 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x960000, 0x0, 0x5, 0x0, r0, &(0x7f0000000040)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xc8, 0x0, 0x0, 0x3}]) 13:46:04 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xe03f0300, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:04 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:04 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:04 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000040)="541ef3ac808dffe97deb8749a6c477ef2d199e3829772088d92725900631f8418769c38991eaf1633d43def5f81ea20802cc25935e3dcc350274b89f3befd9252a480da38c3faeab8a4116ccb914914693e057e9d1b97e879114567edafd02b7705a47c78616bb34544a2bae4b56abcb17b4e51d1b8e5b909d", 0x79, 0x6) io_setup(0x2, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_destroy(r1) 13:46:05 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:05 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xeffdffff, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:05 executing program 2: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xa841}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f00000001c0)) syz_read_part_table(0x4, 0x3, &(0x7f0000000480)=[{0x0, 0x0, 0x50}, {0x0, 0x0, 0x2000000000000000}, {&(0x7f0000000380)="9b1b77f08c7f1fab139a9526f396b0ef32c8cfe3187224f5a48c63645e988c81915972b53e8e1ce94f073e0d801b5b75d8e89f317df8c56552b7db3bd3310e5024acd633583fcb6b4cf7b208d38b5de7e630ab92a9bc100d9690cb3dc6dfaed3e1ac589f0ba11354cf6b7783cd35341dbd4dcf67b8e167c04f13377b2b562ba87512c5975b766b5dec91b4e37b85e04aeff22681fa9b1a65b3e8c05ba96be177958d3fe1544bbbaf28d581df301ae0bd85a683c86c7df97b304711343f726627a7e049f2fcb49957c41f5c37a4e3b7630280a6dfc572c39e3612c1c4649fff3cf157302c3445aa7b", 0xe8}]) 13:46:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000580)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @default, @null]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x72, &(0x7f00000005c0)=""/114}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x4}}, 0x18) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x280, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d740627227b11e2daf85534aa6f5083067b0248878f07a91df1acc99e664c11cbf51b4f6bff473e9c200351ccaefebd642492cfc5ead68cb6a050655a837ad411cb73394239fdd9e33efb5b63c5ff85708d8994e34841e04ec5f4962c4636b7fb34f186b86bb0467bdd13133ef429bda82f9b8e15eae491432dd2a52707c9ff0"], 0x91) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 13:46:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffd73, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipvlan={{0xc, 0x1, 'ipvlan\x00'}, {0xc}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 13:46:05 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xf6ffffff, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 448.254848][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:05 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:05 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000040)="541ef3ac808dffe97deb8749a6c477ef2d199e3829772088d92725900631f8418769c38991eaf1633d43def5f81ea20802cc25935e3dcc350274b89f3befd9252a480da38c3faeab8a4116ccb914914693e057e9d1b97e879114567edafd02b7705a47c78616bb34544a2bae4b56abcb17b4e51d1b8e5b909d", 0x79, 0x6) io_setup(0x2, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_destroy(r1) 13:46:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$P9_RCREATE(r2, &(0x7f0000000340)={0x18, 0x73, 0x1, {{0x2, 0x1, 0x7}, 0x1}}, 0x18) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x4200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000e70000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r4, @ANYBLOB="ac0c000000000000000000000c0080eb8600000075700000200002001c0002000500000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792aafde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r12, 0x40086602, 0x400007) ioctl$DRM_IOCTL_ADD_CTX(r12, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r8, 0x4008642b, &(0x7f0000000400)={r13, 0x4}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000029002104000000000000000080000000", @ANYRES32=r11, @ANYBLOB="ac0c000000000000000000000c0080eb8600000075740000200002001c0002000500000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8c0f7bf7afb33e2375379a707a823a551da368d600d2aafde2698ebe5f83bc5b1d2c1df419444001938703c75ba"], 0x50}}, 0x0) 13:46:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7277}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='hfs\x00', 0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x200000, 0x0) socket$inet(0x2, 0xa, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000007c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') preadv(r2, &(0x7f00000017c0), 0x351, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) ftruncate(r3, 0x6f) lstat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0xd2, 0x8, 0x6, 0x7, 0x0, 0x9, 0x8}, &(0x7f0000000700)={0x7fff, 0x9, 0x0, 0x3, 0xffff, 0x1, 0x0, 0x423c02e2}, 0x0, &(0x7f0000000780)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800), 0x8}) [ 448.637791][T11891] hfs: can't find a HFS filesystem on dev md0 13:46:06 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xfeffffff, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 448.686185][T11895] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:06 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 448.794080][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.819884][T11896] hfs: can't find a HFS filesystem on dev md0 13:46:06 executing program 2: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xa841}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f00000001c0)) syz_read_part_table(0x4, 0x3, &(0x7f0000000480)=[{0x0, 0x0, 0x50}, {0x0, 0x0, 0x2000000000000000}, {&(0x7f0000000380)="9b1b77f08c7f1fab139a9526f396b0ef32c8cfe3187224f5a48c63645e988c81915972b53e8e1ce94f073e0d801b5b75d8e89f317df8c56552b7db3bd3310e5024acd633583fcb6b4cf7b208d38b5de7e630ab92a9bc100d9690cb3dc6dfaed3e1ac589f0ba11354cf6b7783cd35341dbd4dcf67b8e167c04f13377b2b562ba87512c5975b766b5dec91b4e37b85e04aeff22681fa9b1a65b3e8c05ba96be177958d3fe1544bbbaf28d581df301ae0bd85a683c86c7df97b304711343f726627a7e049f2fcb49957c41f5c37a4e3b7630280a6dfc572c39e3612c1c4649fff3cf157302c3445aa7b", 0xe8}]) 13:46:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$P9_RCREATE(r2, &(0x7f0000000340)={0x18, 0x73, 0x1, {{0x2, 0x1, 0x7}, 0x1}}, 0x18) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x4200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff4b) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000e70000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r4, @ANYBLOB="ac0c000000000000000000000c0080eb8600000075700000200002001c0002000500000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792aafde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r12, 0x40086602, 0x400007) ioctl$DRM_IOCTL_ADD_CTX(r12, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r8, 0x4008642b, &(0x7f0000000400)={r13, 0x4}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000029002104000000000000000080000000", @ANYRES32=r11, @ANYBLOB="ac0c000000000000000000000c0080eb8600000075740000200002001c0002000500000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8c0f7bf7afb33e2375379a707a823a551da368d600d2aafde2698ebe5f83bc5b1d2c1df419444001938703c75ba"], 0x50}}, 0x0) 13:46:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100)) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/746], 0x10}}, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x82041a, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) 13:46:06 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xff000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7277}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='hfs\x00', 0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x200000, 0x0) socket$inet(0x2, 0xa, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000007c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') preadv(r2, &(0x7f00000017c0), 0x351, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) ftruncate(r3, 0x6f) lstat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0xd2, 0x8, 0x6, 0x7, 0x0, 0x9, 0x8}, &(0x7f0000000700)={0x7fff, 0x9, 0x0, 0x3, 0xffff, 0x1, 0x0, 0x423c02e2}, 0x0, &(0x7f0000000780)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800), 0x8}) [ 449.189657][T11916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:06 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 449.307791][T11922] hfs: can't find a HFS filesystem on dev md0 13:46:06 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xff0f0000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:06 executing program 2: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xa841}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f00000001c0)) syz_read_part_table(0x4, 0x3, &(0x7f0000000480)=[{0x0, 0x0, 0x50}, {0x0, 0x0, 0x2000000000000000}, {&(0x7f0000000380)="9b1b77f08c7f1fab139a9526f396b0ef32c8cfe3187224f5a48c63645e988c81915972b53e8e1ce94f073e0d801b5b75d8e89f317df8c56552b7db3bd3310e5024acd633583fcb6b4cf7b208d38b5de7e630ab92a9bc100d9690cb3dc6dfaed3e1ac589f0ba11354cf6b7783cd35341dbd4dcf67b8e167c04f13377b2b562ba87512c5975b766b5dec91b4e37b85e04aeff22681fa9b1a65b3e8c05ba96be177958d3fe1544bbbaf28d581df301ae0bd85a683c86c7df97b304711343f726627a7e049f2fcb49957c41f5c37a4e3b7630280a6dfc572c39e3612c1c4649fff3cf157302c3445aa7b", 0xe8}]) 13:46:06 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xfffffffffffffffa}, 0x0, 0xa, 0xffffffffffffffff, 0x1) fcntl$setstatus(r1, 0x4, 0x2000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x7a6172a430e1732f, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$P9_RLERROR(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000007000000002f5865762f6d2cfb04944863267afb7625c3a6ef6b766d00"], 0x12) fsmount(0xffffffffffffffff, 0x0, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0x90003}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 13:46:07 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100)) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/746], 0x10}}, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x82041a, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) 13:46:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7277}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='hfs\x00', 0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x200000, 0x0) socket$inet(0x2, 0xa, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000007c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') preadv(r2, &(0x7f00000017c0), 0x351, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) ftruncate(r3, 0x6f) lstat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0xd2, 0x8, 0x6, 0x7, 0x0, 0x9, 0x8}, &(0x7f0000000700)={0x7fff, 0x9, 0x0, 0x3, 0xffff, 0x1, 0x0, 0x423c02e2}, 0x0, &(0x7f0000000780)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800), 0x8}) 13:46:07 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xfffffdef, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:07 executing program 2: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xa841}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f00000001c0)) syz_read_part_table(0x4, 0x3, &(0x7f0000000480)=[{0x0, 0x0, 0x50}, {0x0, 0x0, 0x2000000000000000}, {&(0x7f0000000380)="9b1b77f08c7f1fab139a9526f396b0ef32c8cfe3187224f5a48c63645e988c81915972b53e8e1ce94f073e0d801b5b75d8e89f317df8c56552b7db3bd3310e5024acd633583fcb6b4cf7b208d38b5de7e630ab92a9bc100d9690cb3dc6dfaed3e1ac589f0ba11354cf6b7783cd35341dbd4dcf67b8e167c04f13377b2b562ba87512c5975b766b5dec91b4e37b85e04aeff22681fa9b1a65b3e8c05ba96be177958d3fe1544bbbaf28d581df301ae0bd85a683c86c7df97b304711343f726627a7e049f2fcb49957c41f5c37a4e3b7630280a6dfc572c39e3612c1c4649fff3cf157302c3445aa7b", 0xe8}]) [ 449.917993][ C0] net_ratelimit: 20 callbacks suppressed [ 449.918002][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.929470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 450.006130][T11961] hfs: can't find a HFS filesystem on dev md0 13:46:07 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:07 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xffffff7f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:07 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:07 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x13, 0x0) ptrace(0x10, r5) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x4, 0x4a, 0xb7, 0x4, 0x0, 0xfffffffffffffff7, 0x110b1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x5, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0xfff, 0x61e, 0x5, 0x3, 0x3ff, 0x200}, r5, 0x3, 0xffffffffffffffff, 0x9) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 450.238009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.243817][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 450.249616][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.255472][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:07 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xfffffff6, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0x1f, 0x10100, &(0x7f0000000040)={0xa, 0x0, 0x112da39d}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0xffffffffffffff86) socketpair(0x0, 0x0, 0x0, 0x0) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setgid(0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="b863aefe50757cb5430b887d7a41095e52042b10d6f0be906682eaf94df13c770a920fc148f68963452bb6c77ef69eb002150c41e1a61610038f", 0xffffffffffffffbc, 0x0, 0x0, 0x0) 13:46:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x802) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0xa000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000740)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmnet1'}}]}}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000740)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmnet1'}}]}}) creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000e40)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x80000000001}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth\xfcO\xfdN6\x16\x94\\\x9c\xb8\xd1\x8a0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmn\x87t1'}}]}}) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000740)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmnet1'}}]}}) getgroups(0xa, &(0x7f0000000400)=[r6, 0xee00, 0x0, 0xee01, 0xee01, r8, r9, 0xee01, 0xffffffffffffffff, r12]) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000440)={0xa0, 0x0, 0x6, {{0x6, 0x1, 0xea70, 0xfffffffffffffffc, 0x4, 0x1, {0x4, 0xffffffffffffffff, 0x9, 0x5, 0x2, 0x2, 0x401, 0x3, 0x3, 0xd4, 0x8001, r4, r13, 0x20, 0xe8a}}, {0x0, 0x2}}}, 0xa0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x100, 0x8}) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_procfs(0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x48000, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="388fd40010a7370356298252ea00"/29, @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r16, @ANYBLOB], 0x38}}, 0x0) 13:46:08 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:08 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xfffffffe, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 450.797987][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.803780][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 450.836476][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:46:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 451.038004][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:46:08 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030ac23b1d3ba5780ab30325e00707070316c6f637075731d0000002f6465001b6877726e6700"], 0x37) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000280)=0x10) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x150, 0x0, 0xff}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x81e8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, '\x00', {0x1}, 0x7}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x2}, 0x1c}}, 0x2004810) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) 13:46:08 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x802) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0xa000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000740)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmnet1'}}]}}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000740)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmnet1'}}]}}) creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000e40)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x80000000001}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth\xfcO\xfdN6\x16\x94\\\x9c\xb8\xd1\x8a0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmn\x87t1'}}]}}) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x939f6a809c2ab3af, &(0x7f0000000740)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '$em0eth0'}}, {@uid_lt={'uid<'}}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, ')}#eth1\'vmnet1'}}]}}) getgroups(0xa, &(0x7f0000000400)=[r6, 0xee00, 0x0, 0xee01, 0xee01, r8, r9, 0xee01, 0xffffffffffffffff, r12]) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000440)={0xa0, 0x0, 0x6, {{0x6, 0x1, 0xea70, 0xfffffffffffffffc, 0x4, 0x1, {0x4, 0xffffffffffffffff, 0x9, 0x5, 0x2, 0x2, 0x401, 0x3, 0x3, 0xd4, 0x8001, r4, r13, 0x20, 0xe8a}}, {0x0, 0x2}}}, 0xa0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x100, 0x8}) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_procfs(0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x48000, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="388fd40010a7370356298252ea00"/29, @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r16, @ANYBLOB], 0x38}}, 0x0) 13:46:08 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x2}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:08 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:08 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x3}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:08 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030ac23b1d3ba5780ab30325e00707070316c6f637075731d0000002f6465001b6877726e6700"], 0x37) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000280)=0x10) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x150, 0x0, 0xff}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x81e8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, '\x00', {0x1}, 0x7}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x2}, 0x1c}}, 0x2004810) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) 13:46:08 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:09 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x4}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:09 executing program 4: set_mempolicy(0x0, 0x0, 0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x646841) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = dup2(0xffffffffffffffff, r0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400)={r2, 0x3c, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf"}, &(0x7f0000000080)=0x44) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x80045301, &(0x7f00000001c0)) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 13:46:09 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) write$cgroup_pid(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100017, 0x500001c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000100), &(0x7f0000000480)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x4, 0x1f}, 0x0, 0x8239, 0x0, 0x0, 0x1000, 0x9, 0x7}) close(0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0xffffffffffffffff) 13:46:09 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:09 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x5}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 451.254444][T12029] AppArmor: change_hat: Invalid input '0x000000¬#±ÓºW€«02^' [ 451.979529][T12078] AppArmor: change_hat: Invalid input '0x000000¬#±ÓºW€«02^' [ 452.107862][ T27] audit: type=1804 audit(1579441569.428:72): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir699049382/syzkaller.ujnMXr/141/memory.events" dev="sda1" ino=16817 res=1 13:46:09 executing program 0: acct(&(0x7f0000000380)='./bus\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x2000}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000007d40), 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x100) mknodat(r3, &(0x7f0000000080)='./bus\x00', 0xa6fe0d2a127b8fa6, 0x800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d740627227b11e2daf85534aa6f5083067b0248878f07a91df1acc99e664c11cbf51b4f6bff473492cfc5ead68cb6a050655a837ad411cb73394239fdd9e33efb5b63c5ff85708d8994e34841e04ec5f4962c4636b7fb34f186b86bb0467bdd13133ef429bda82f9b8e15eae491432dd2a52707c9ff05a83380901aeeba6a468acc0159117074b79e3eae14d827e00eef64107f2ce8e6406530582030000000000000094a125159b91f5ef3121dfcdb74078938059110bd142f3c312c6ecfa636c2567683920c19b877c15b8b56a570369b4d863ae8a1426f3f21dc7ae5e1ed8ee86c42b4c4b52f5f951d46e18aaa93e909ccf37a43455b24102c998836b67ed7064869a18b2d66a5a45630aad00"/297], 0x129) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000340)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 452.237364][T12090] overlayfs: failed to resolve './file0': -2 [ 452.276440][T12096] FAT-fs (loop0): bogus number of reserved sectors 13:46:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 452.289012][T12096] FAT-fs (loop0): Can't find a valid FAT filesystem 13:46:09 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:09 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:09 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x7}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:10 executing program 4: set_mempolicy(0x0, 0x0, 0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x646841) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = dup2(0xffffffffffffffff, r0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400)={r2, 0x3c, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf"}, &(0x7f0000000080)=0x44) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x80045301, &(0x7f00000001c0)) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 13:46:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) [ 452.732994][ T27] audit: type=1804 audit(1579441570.058:73): pid=12080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir699049382/syzkaller.ujnMXr/141/memory.events" dev="sda1" ino=16817 res=1 [ 452.910205][T12114] overlayfs: failed to resolve './file0': -2 13:46:10 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) write$cgroup_pid(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100017, 0x500001c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000100), &(0x7f0000000480)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x4, 0x1f}, 0x0, 0x8239, 0x0, 0x0, 0x1000, 0x9, 0x7}) close(0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0xffffffffffffffff) 13:46:10 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x8}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:10 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xa}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:10 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x11}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 453.494112][ T27] audit: type=1804 audit(1579441570.818:74): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir699049382/syzkaller.ujnMXr/142/memory.events" dev="sda1" ino=16539 res=1 [ 453.507108][T12149] overlayfs: failed to resolve './file0': -2 [ 453.577666][T12096] Process accounting resumed 13:46:10 executing program 0: acct(&(0x7f0000000380)='./bus\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x2000}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000007d40), 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x100) mknodat(r3, &(0x7f0000000080)='./bus\x00', 0xa6fe0d2a127b8fa6, 0x800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d740627227b11e2daf85534aa6f5083067b0248878f07a91df1acc99e664c11cbf51b4f6bff473492cfc5ead68cb6a050655a837ad411cb73394239fdd9e33efb5b63c5ff85708d8994e34841e04ec5f4962c4636b7fb34f186b86bb0467bdd13133ef429bda82f9b8e15eae491432dd2a52707c9ff05a83380901aeeba6a468acc0159117074b79e3eae14d827e00eef64107f2ce8e6406530582030000000000000094a125159b91f5ef3121dfcdb74078938059110bd142f3c312c6ecfa636c2567683920c19b877c15b8b56a570369b4d863ae8a1426f3f21dc7ae5e1ed8ee86c42b4c4b52f5f951d46e18aaa93e909ccf37a43455b24102c998836b67ed7064869a18b2d66a5a45630aad00"/297], 0x129) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000340)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 13:46:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:10 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x27}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:11 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:11 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xc0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:11 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:11 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x300}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:11 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:12 executing program 0: acct(&(0x7f0000000380)='./bus\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x2000}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000007d40), 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x100) mknodat(r3, &(0x7f0000000080)='./bus\x00', 0xa6fe0d2a127b8fa6, 0x800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="3a258211f663a7724bdef6a53bfce1e775d740627227b11e2daf85534aa6f5083067b0248878f07a91df1acc99e664c11cbf51b4f6bff473492cfc5ead68cb6a050655a837ad411cb73394239fdd9e33efb5b63c5ff85708d8994e34841e04ec5f4962c4636b7fb34f186b86bb0467bdd13133ef429bda82f9b8e15eae491432dd2a52707c9ff05a83380901aeeba6a468acc0159117074b79e3eae14d827e00eef64107f2ce8e6406530582030000000000000094a125159b91f5ef3121dfcdb74078938059110bd142f3c312c6ecfa636c2567683920c19b877c15b8b56a570369b4d863ae8a1426f3f21dc7ae5e1ed8ee86c42b4c4b52f5f951d46e18aaa93e909ccf37a43455b24102c998836b67ed7064869a18b2d66a5a45630aad00"/297], 0x129) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000340)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 13:46:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:12 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x500}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 454.830546][T12199] FAT-fs (loop0): bogus number of reserved sectors [ 454.845779][T12199] FAT-fs (loop0): Can't find a valid FAT filesystem 13:46:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) 13:46:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) [ 454.957990][ C1] net_ratelimit: 22 callbacks suppressed [ 454.957999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.969461][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:12 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x600}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 455.201452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.207512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.213676][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.219703][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:12 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x700}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) 13:46:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) socket$bt_hidp(0x1f, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) 13:46:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) 13:46:13 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xa00}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:13 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 13:46:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) 13:46:13 executing program 3: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 456.074052][T12259] overlayfs: missing 'lowerdir' 13:46:13 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1100}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:13 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) [ 456.158009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 456.163811][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:46:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) [ 456.391256][T12273] overlayfs: missing 'lowerdir' [ 456.478288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 456.484092][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(0xffffffffffffffff, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:13 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x2700}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) getdents64(r2, &(0x7f0000000300)=""/31, 0x1f) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0) r3 = creat(0x0, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close(r3) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x8) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x13, 0x0) ptrace(0x10, r5) ptrace$getsig(0x4202, r5, 0x1, &(0x7f0000000340)) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x2ef, 0xfa00, {r6, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x9, @ipv4={[], [], @multicast2}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0xffffffa1) ptrace(0x10, 0x0) ptrace$setopts(0x11, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0xca200) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x0, 0x1, {0x0, 0x0, 0x8}}) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x400000000000107, 0x0) 13:46:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) 13:46:14 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 13:46:14 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x3e80}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:14 executing program 4: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1100}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(0xffffffffffffffff, r5, &(0x7f0000000080)=0x81, 0x7) [ 457.198948][T12307] overlayfs: missing 'lowerdir' 13:46:14 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x3ec0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x85c}], 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x7, 0x9, 0x4, 0x20044000, 0x0, {0x77359400}, {0x1ac7132ac669a44b, 0x2, 0x3f, 0x7, 0xff, 0x7f, "fa9d1d5a"}, 0x7671, 0x4, @userptr=0x4, 0x1200000, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc0506107, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xa20000, 0x10000, 0x4, r2, 0x0, &(0x7f0000000040)={0x9909d5, 0x3, [], @value=0x3}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$9p(r5, &(0x7f0000001400)="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", 0x101) sendfile(r5, r6, 0x0, 0x10000) 13:46:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(0xffffffffffffffff, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:14 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 13:46:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) 13:46:14 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x803e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 457.588180][T12327] FAT-fs (loop4): bogus number of reserved sectors [ 457.599658][T12330] overlayfs: missing 'workdir' [ 457.631141][T12327] FAT-fs (loop4): Can't find a valid FAT filesystem 13:46:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(0xffffffffffffffff, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:15 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 457.680748][ T27] audit: type=1804 audit(1579441575.008:75): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir928191111/syzkaller.KGIkeT/139/file0/file0" dev="sda1" ino=16503 res=1 13:46:15 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 457.738949][ T27] audit: type=1800 audit(1579441575.038:76): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16503 res=0 [ 457.770468][T12337] overlayfs: missing 'workdir' 13:46:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 457.883407][T12343] overlayfs: missing 'workdir' 13:46:15 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r1 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4, 0x3f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580), 0x0) rmdir(&(0x7f0000000700)='./file1\x00') stat(&(0x7f0000000500)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0x1000, 0xa04, &(0x7f000047b000/0x1000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r3, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r4 = accept(r3, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r5, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) gettid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000840)) gettid() r7 = getpgrp(0xffffffffffffffff) getpgid(r7) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x400, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8a80, 0xc1f}, 0x0, 0xffffffffffffffff, r1, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xe7}], 0x1, 0x0) io_setup(0xfe, &(0x7f0000000200)) memfd_create(&(0x7f0000000900)='\x00\x05\xdb\x1f]\x0f>\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\xe9\xe7\xac\"\xed\x96F\xec\xdcd\xcan6\x1d\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89', 0x3) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000280)=0x2, 0x4) socket$inet(0x2, 0x0, 0x3) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000640)) 13:46:15 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xc000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000080)=0x81, 0x7) 13:46:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:15 executing program 3: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0xf000000, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socket$inet_tcp(0x2, 0x1, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)=0x468) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a6b007656c352b960904b585c7afdcd76b88a96f516a842c5fd56", 0x2b}, {0x0}], 0x2, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x8090) r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) 13:46:15 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:15 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xc03e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="caae6435368321dc683ad8f2747e94672efc6b883a427cd2a3239ad2dafa7aeb0b8b1d6327aafc87a1dd951eceb1cf17de6b53937253928eae55392e2c9f932578571784ef758cc169e096b3bfed85455bd3f1aa57cc0fef765c19a6b3802a31c3bb8460b4e5cdb54f97beec0100000000000000d709e40199d3ba63e141165671fdefa4a15aeb4da17ef67e023e160055d9c92773f9915b2bd13e411c20b9d3e5ac10c4a64188d0b146aade71e58182ddc1c23473590f3ad5296d978852a378ca4e5a2aae6e6e6319db08c04c715aacafb87142", @ANYRES16=r2, @ANYBLOB="060b07000000fcdbdf250c00000008000500080000000c00020006000e004e230000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4df10700, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0x4}]}, 0x48}}, 0x0) 13:46:16 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xff00}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r1 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4, 0x3f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580), 0x0) rmdir(&(0x7f0000000700)='./file1\x00') stat(&(0x7f0000000500)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0x1000, 0xa04, &(0x7f000047b000/0x1000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r3, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r4 = accept(r3, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r5, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) gettid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000840)) gettid() r7 = getpgrp(0xffffffffffffffff) getpgid(r7) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x400, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8a80, 0xc1f}, 0x0, 0xffffffffffffffff, r1, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xe7}], 0x1, 0x0) io_setup(0xfe, &(0x7f0000000200)) memfd_create(&(0x7f0000000900)='\x00\x05\xdb\x1f]\x0f>\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\xe9\xe7\xac\"\xed\x96F\xec\xdcd\xcan6\x1d\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89', 0x3) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000280)=0x2, 0x4) socket$inet(0x2, 0x0, 0x3) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000640)) 13:46:16 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:16 executing program 3: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0xf000000, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socket$inet_tcp(0x2, 0x1, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)=0x468) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a6b007656c352b960904b585c7afdcd76b88a96f516a842c5fd56", 0x2b}, {0x0}], 0x2, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x8090) r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) [ 458.877870][T12398] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 13:46:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:16 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xff0f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="caae6435368321dc683ad8f2747e94672efc6b883a427cd2a3239ad2dafa7aeb0b8b1d6327aafc87a1dd951eceb1cf17de6b53937253928eae55392e2c9f932578571784ef758cc169e096b3bfed85455bd3f1aa57cc0fef765c19a6b3802a31c3bb8460b4e5cdb54f97beec0100000000000000d709e40199d3ba63e141165671fdefa4a15aeb4da17ef67e023e160055d9c92773f9915b2bd13e411c20b9d3e5ac10c4a64188d0b146aade71e58182ddc1c23473590f3ad5296d978852a378ca4e5a2aae6e6e6319db08c04c715aacafb87142", @ANYRES16=r2, @ANYBLOB="060b07000000fcdbdf250c00000008000500080000000c00020006000e004e230000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4df10700, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0x4}]}, 0x48}}, 0x0) 13:46:16 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:16 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1517f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 459.473860][T12428] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 13:46:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r1 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4, 0x3f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580), 0x0) rmdir(&(0x7f0000000700)='./file1\x00') stat(&(0x7f0000000500)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0x1000, 0xa04, &(0x7f000047b000/0x1000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r3, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r4 = accept(r3, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r5, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) gettid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000840)) gettid() r7 = getpgrp(0xffffffffffffffff) getpgid(r7) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x400, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8a80, 0xc1f}, 0x0, 0xffffffffffffffff, r1, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xe7}], 0x1, 0x0) io_setup(0xfe, &(0x7f0000000200)) memfd_create(&(0x7f0000000900)='\x00\x05\xdb\x1f]\x0f>\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\xe9\xe7\xac\"\xed\x96F\xec\xdcd\xcan6\x1d\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89', 0x3) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000280)=0x2, 0x4) socket$inet(0x2, 0x0, 0x3) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000640)) 13:46:17 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x33fe0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 459.684778][T12440] overlayfs: missing 'lowerdir' 13:46:17 executing program 3: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0xf000000, 0x0, r1, &(0x7f0000000340), 0xfdef}]) socket$inet_tcp(0x2, 0x1, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)=0x468) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ee6f7be258457fb223b394ef3275ecdb8a6b007656c352b960904b585c7afdcd76b88a96f516a842c5fd56", 0x2b}, {0x0}], 0x2, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x8090) r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) 13:46:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) [ 459.877609][T12444] debugfs: Directory 'loop0' with parent 'block' already present! [ 460.056701][T12458] overlayfs: missing 'lowerdir' 13:46:17 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x34000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 460.318080][ C0] net_ratelimit: 20 callbacks suppressed [ 460.318104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 460.329644][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:46:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) [ 460.423268][T12480] overlayfs: missing 'lowerdir' 13:46:17 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x40000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:17 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xd8, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfe00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x1}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x1}, 0x1, 0x0, 0x0, 0x20018400}, 0x4800) 13:46:18 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x400300}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 460.637998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 460.643803][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 460.649632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 460.655393][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:18 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x404000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYBLOB=',access=user,\x00']) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000280)=""/4096) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 460.783980][T12498] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 460.792999][T12498] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 13:46:18 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) [ 461.082394][T12519] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 461.091597][T12519] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 13:46:18 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:18 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:18 executing program 0: syz_read_part_table(0x0, 0x3, &(0x7f0000000100)=[{&(0x7f0000000000)="c9c2d9242bf67b8c8d1133dfc3810000008208b4fd35992ff2f387ddc955d74b15440000000000", 0xfffffffffffffecd, 0x1ff}, {0x0}, {&(0x7f0000000180)="ef657aefa94658bad6e9edc90c6c3449073a400b1b46b1f751a8917757d9027da2bbe1feecfb31f8e90667fbfe6c5ea6accb5430cb53320ec0b96640f841a777b5f112f569287606bfc82d29126d5cef78992af213adf4f4a3465a526443955fb33403d3f9013fe5e2d3b24223629f802559b42c143df147def82a9f34262b6634fe8ecbd9b42d5cb5627ee46141979c078dc9b613800f008e792a081b802867f2a33982942fddbc56349137d8bd5d6021d9fe4f4a10c8158d4cbbef7282b7d4b003efe388813035b80a28b249c830127e6b78ee1b423e787e4c1dac", 0xdc, 0x1}]) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x46181, 0x0) 13:46:18 executing program 4: syz_open_dev$audion(0x0, 0xb4, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000740)={{0x1}, 'port0\x00', 0x0, 0x0, 0x1000}) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0xffffffffffffffc9) [ 461.198000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.204193][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) [ 461.438025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.443916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 461.489624][T12531] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 13:46:18 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x2000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 461.542206][T12531] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 13:46:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:19 executing program 4 (fault-call:7 fault-nth:0): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:19 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x3000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 461.956614][T12565] FAULT_INJECTION: forcing a failure. [ 461.956614][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 462.010672][T12565] CPU: 0 PID: 12565 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 462.019668][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.030088][T12565] Call Trace: [ 462.033389][T12565] dump_stack+0x11d/0x181 [ 462.037759][T12565] should_fail.cold+0xa/0x1a [ 462.042441][T12565] __should_failslab+0xee/0x130 [ 462.047323][T12565] should_failslab+0x9/0x14 [ 462.052013][T12565] __kmalloc_track_caller+0x4f/0x690 [ 462.057317][T12565] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 462.063226][T12565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.070009][T12565] ? __this_cpu_preempt_check+0x45/0x140 [ 462.075678][T12565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.081931][T12565] ? strndup_user+0x85/0xc0 [ 462.086442][T12565] memdup_user+0x2f/0xc0 [ 462.090744][T12565] strndup_user+0x85/0xc0 [ 462.095090][T12565] ksys_mount+0x45/0x160 [ 462.099346][T12565] __x64_sys_mount+0x70/0x90 [ 462.104113][T12565] do_syscall_64+0xcc/0x3a0 [ 462.108763][T12565] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 462.114680][T12565] RIP: 0033:0x45b159 [ 462.118657][T12565] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.139333][T12565] RSP: 002b:00007f7a84d02c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 462.147869][T12565] RAX: ffffffffffffffda RBX: 00007f7a84d036d4 RCX: 000000000045b159 [ 462.156038][T12565] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 462.164265][T12565] RBP: 000000000075bf20 R08: 0000000020000080 R09: 0000000000000000 [ 462.172390][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 462.180377][T12565] R13: 0000000000000730 R14: 00000000004c87e1 R15: 0000000000000000 13:46:19 executing program 4 (fault-call:7 fault-nth:1): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:19 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x4000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) [ 462.280052][T12568] debugfs: Directory 'loop0' with parent 'block' already present! [ 462.521284][T12587] FAULT_INJECTION: forcing a failure. [ 462.521284][T12587] name failslab, interval 1, probability 0, space 0, times 0 [ 462.568025][T12587] CPU: 0 PID: 12587 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 462.576864][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.587014][T12587] Call Trace: [ 462.590388][T12587] dump_stack+0x11d/0x181 [ 462.594908][T12587] should_fail.cold+0xa/0x1a [ 462.599519][T12587] __should_failslab+0xee/0x130 [ 462.604417][T12587] should_failslab+0x9/0x14 [ 462.608980][T12587] __kmalloc_track_caller+0x4f/0x690 [ 462.614547][T12587] ? constant_test_bit.constprop.0+0xd/0x20 [ 462.620503][T12587] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 462.626223][T12587] ? __check_object_size+0x5f/0x346 [ 462.631412][T12587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 462.637684][T12587] ? _copy_from_user+0x98/0xf0 [ 462.642459][T12587] ? strndup_user+0x85/0xc0 [ 462.647083][T12587] memdup_user+0x2f/0xc0 [ 462.651316][T12587] strndup_user+0x85/0xc0 [ 462.655792][T12587] ksys_mount+0x84/0x160 [ 462.660040][T12587] __x64_sys_mount+0x70/0x90 [ 462.664652][T12587] do_syscall_64+0xcc/0x3a0 [ 462.669210][T12587] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 462.675149][T12587] RIP: 0033:0x45b159 [ 462.679153][T12587] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.698966][T12587] RSP: 002b:00007f7a84d02c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 462.707458][T12587] RAX: ffffffffffffffda RBX: 00007f7a84d036d4 RCX: 000000000045b159 13:46:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=@newlink={0xa8, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x7c, 0x1, {0x9eec5dd1d15aca26, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}}]}]}, 0xa8}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x400000000000000}, 0x16, 0x6) 13:46:20 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x2b42969e38fbe39c) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000001280)={0x40000000, 0x0, "ad1eb7de70173150fc67eec52ec2c5d34a3dd6bb47b5d4620e9a247ae445c54d"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', r0}, 0x10) socket$kcm(0x29, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./bus\x00') setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0xd5}, {0x8, 0xfeb}]}, 0x14, 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x244800, &(0x7f0000000600)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303737372c6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303032303030303030303030312c7569643d2235b8b9ba43ec3203e22ce57294cdbedb67dad63a207eeb969fa02beaf28f128171827e584dfe85c5c57a771749eea317f144b667be631373594bcdd6dcb7570239be6763a6f882fef3f0727493c68cf5a08eedc1dcb7bd050a7619023f27c57018", @ANYRESDEC=r2, @ANYBLOB=',Tt]>3', @ANYRESDEC, @ANYBLOB=',obj_user=\\,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) creat(&(0x7f0000000000)='./bus\x00', 0x0) 13:46:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:20 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x5000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:20 executing program 4 (fault-call:7 fault-nth:2): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 462.715476][T12587] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 462.723458][T12587] RBP: 000000000075bf20 R08: 0000000020000080 R09: 0000000000000000 [ 462.731551][T12587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 462.739704][T12587] R13: 0000000000000730 R14: 00000000004c87e1 R15: 0000000000000001 [ 462.910461][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 462.972418][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 463.022132][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 13:46:20 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4a938ed549cb5fab, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000440)=0x1, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x7) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$radio(0x0, 0x3, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r5, 0x200004) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x8000, 0x0) r7 = perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8201}, 0x0, 0xffffffffffffffff, r6, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)) getegid() r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000700)=""/103, 0x67}], 0x2}, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) fcntl$getownex(r7, 0x10, &(0x7f0000000a80)) lstat(0x0, &(0x7f0000000b00)) 13:46:20 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x6000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 463.073765][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 463.108954][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 13:46:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 463.153936][T12610] FAULT_INJECTION: forcing a failure. [ 463.153936][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 463.188922][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 463.228079][T12610] CPU: 0 PID: 12610 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 463.237005][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.247064][T12610] Call Trace: [ 463.250442][T12610] dump_stack+0x11d/0x181 [ 463.251288][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 463.254811][T12610] should_fail.cold+0xa/0x1a [ 463.254841][T12610] __should_failslab+0xee/0x130 [ 463.272367][T12610] should_failslab+0x9/0x14 [ 463.276935][T12610] kmem_cache_alloc_trace+0x2a/0x5d0 [ 463.282256][T12610] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 463.288080][T12610] ? __check_object_size+0x5f/0x346 [ 463.293610][T12610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 463.299882][T12610] ? _copy_from_user+0x98/0xf0 [ 463.304744][T12610] copy_mount_options+0x52/0x2a0 [ 463.309697][T12610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 463.315947][T12610] ksys_mount+0xb0/0x160 [ 463.320271][T12610] __x64_sys_mount+0x70/0x90 [ 463.324968][T12610] do_syscall_64+0xcc/0x3a0 [ 463.325210][T12597] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 463.329510][T12610] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 463.329531][T12610] RIP: 0033:0x45b159 [ 463.329635][T12610] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 463.329655][T12610] RSP: 002b:00007f7a84ce1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 463.359581][T12597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.369055][T12610] RAX: ffffffffffffffda RBX: 00007f7a84ce26d4 RCX: 000000000045b159 [ 463.369068][T12610] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 463.369078][T12610] RBP: 000000000075bfc8 R08: 0000000020000080 R09: 0000000000000000 [ 463.369164][T12610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 13:46:20 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x2b42969e38fbe39c) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000001280)={0x40000000, 0x0, "ad1eb7de70173150fc67eec52ec2c5d34a3dd6bb47b5d4620e9a247ae445c54d"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', r0}, 0x10) socket$kcm(0x29, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./bus\x00') setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0xd5}, {0x8, 0xfeb}]}, 0x14, 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x244800, &(0x7f0000000600)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303737372c6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303032303030303030303030312c7569643d2235b8b9ba43ec3203e22ce57294cdbedb67dad63a207eeb969fa02beaf28f128171827e584dfe85c5c57a771749eea317f144b667be631373594bcdd6dcb7570239be6763a6f882fef3f0727493c68cf5a08eedc1dcb7bd050a7619023f27c57018", @ANYRESDEC=r2, @ANYBLOB=',Tt]>3', @ANYRESDEC, @ANYBLOB=',obj_user=\\,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 463.369186][T12610] R13: 0000000000000730 R14: 00000000004c87e1 R15: 0000000000000002 [ 463.421456][T12597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.445423][T12597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:46:20 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x7000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:20 executing program 4 (fault-call:7 fault-nth:3): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 463.844786][T12631] FAULT_INJECTION: forcing a failure. [ 463.844786][T12631] name failslab, interval 1, probability 0, space 0, times 0 [ 463.885974][T12631] CPU: 0 PID: 12631 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 463.895307][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.905368][T12631] Call Trace: [ 463.908855][T12631] dump_stack+0x11d/0x181 [ 463.913298][T12631] should_fail.cold+0xa/0x1a [ 463.917917][T12631] __should_failslab+0xee/0x130 [ 463.922850][T12631] should_failslab+0x9/0x14 [ 463.927396][T12631] kmem_cache_alloc+0x29/0x5d0 [ 463.932294][T12631] ? __write_once_size.constprop.0+0x12/0x20 [ 463.938291][T12631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.944742][T12631] ? should_fail+0xd4/0x45d [ 463.949239][T12631] getname_flags+0x91/0x380 [ 463.953746][T12631] user_path_at_empty+0x38/0x70 [ 463.958620][T12631] do_mount+0xc8/0x14f0 [ 463.962851][T12631] ? copy_mount_options+0x200/0x2a0 [ 463.968070][T12631] ksys_mount+0xe8/0x160 [ 463.972371][T12631] __x64_sys_mount+0x70/0x90 [ 463.977133][T12631] do_syscall_64+0xcc/0x3a0 13:46:21 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x8000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 463.981758][T12631] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 463.987655][T12631] RIP: 0033:0x45b159 [ 463.991565][T12631] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.012116][T12631] RSP: 002b:00007f7a84d02c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 464.020663][T12631] RAX: ffffffffffffffda RBX: 00007f7a84d036d4 RCX: 000000000045b159 [ 464.028812][T12631] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 464.036774][T12631] RBP: 000000000075bf20 R08: 0000000020000080 R09: 0000000000000000 [ 464.044734][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 464.052700][T12631] R13: 0000000000000730 R14: 00000000004c87e1 R15: 0000000000000003 13:46:21 executing program 4 (fault-call:7 fault-nth:4): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 464.243710][ T27] audit: type=1800 audit(1579441581.568:77): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16625 res=0 13:46:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:21 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4a938ed549cb5fab, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000440)=0x1, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x7) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$radio(0x0, 0x3, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r5, 0x200004) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x8000, 0x0) r7 = perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8201}, 0x0, 0xffffffffffffffff, r6, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)) getegid() r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000700)=""/103, 0x67}], 0x2}, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) fcntl$getownex(r7, 0x10, &(0x7f0000000a80)) lstat(0x0, &(0x7f0000000b00)) 13:46:21 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xa000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 464.364908][T12653] FAULT_INJECTION: forcing a failure. [ 464.364908][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 464.394883][T12653] CPU: 0 PID: 12653 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 464.403608][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.414162][T12653] Call Trace: [ 464.417600][T12653] dump_stack+0x11d/0x181 [ 464.422073][T12653] should_fail.cold+0xa/0x1a [ 464.426882][T12653] __should_failslab+0xee/0x130 [ 464.431749][T12653] should_failslab+0x9/0x14 [ 464.436264][T12653] __kmalloc+0x53/0x690 [ 464.440466][T12653] ? __follow_mount_rcu.isra.0+0x220/0x310 [ 464.446285][T12653] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 464.452189][T12653] ? tomoyo_encode2.part.0+0xd9/0x260 [ 464.457585][T12653] tomoyo_encode2.part.0+0xd9/0x260 [ 464.462842][T12653] tomoyo_encode+0x34/0x50 [ 464.467273][T12653] tomoyo_mount_acl+0x7b/0x590 [ 464.472061][T12653] ? dput+0xab/0x750 [ 464.476044][T12653] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 464.482305][T12653] ? ___cache_free+0x2e/0x320 [ 464.487042][T12653] ? terminate_walk+0x1d0/0x250 [ 464.491896][T12653] ? complete_walk+0xd9/0x170 [ 464.496595][T12653] tomoyo_mount_permission+0xef/0x350 [ 464.502036][T12653] tomoyo_sb_mount+0x3e/0x60 [ 464.506660][T12653] security_sb_mount+0x81/0xc0 [ 464.511534][T12653] do_mount+0x129/0x14f0 13:46:21 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x11000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 464.515836][T12653] ksys_mount+0xe8/0x160 [ 464.520093][T12653] __x64_sys_mount+0x70/0x90 [ 464.524781][T12653] do_syscall_64+0xcc/0x3a0 [ 464.529345][T12653] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 464.535330][T12653] RIP: 0033:0x45b159 [ 464.539331][T12653] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.559076][T12653] RSP: 002b:00007f7a84ce1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 464.567505][T12653] RAX: ffffffffffffffda RBX: 00007f7a84ce26d4 RCX: 000000000045b159 [ 464.575687][T12653] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 464.583756][T12653] RBP: 000000000075bfc8 R08: 0000000020000080 R09: 0000000000000000 [ 464.591827][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 464.599896][T12653] R13: 0000000000000730 R14: 00000000004c87e1 R15: 0000000000000004 13:46:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:22 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x2b42969e38fbe39c) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000001280)={0x40000000, 0x0, "ad1eb7de70173150fc67eec52ec2c5d34a3dd6bb47b5d4620e9a247ae445c54d"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', r0}, 0x10) socket$kcm(0x29, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./bus\x00') setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0xd5}, {0x8, 0xfeb}]}, 0x14, 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x244800, &(0x7f0000000600)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303737372c6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303032303030303030303030312c7569643d2235b8b9ba43ec3203e22ce57294cdbedb67dad63a207eeb969fa02beaf28f128171827e584dfe85c5c57a771749eea317f144b667be631373594bcdd6dcb7570239be6763a6f882fef3f0727493c68cf5a08eedc1dcb7bd050a7619023f27c57018", @ANYRESDEC=r2, @ANYBLOB=',Tt]>3', @ANYRESDEC, @ANYBLOB=',obj_user=\\,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) creat(&(0x7f0000000000)='./bus\x00', 0x0) 13:46:22 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x27000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:22 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x2b42969e38fbe39c) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000001280)={0x40000000, 0x0, "ad1eb7de70173150fc67eec52ec2c5d34a3dd6bb47b5d4620e9a247ae445c54d"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', r0}, 0x10) socket$kcm(0x29, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./bus\x00') setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0xd5}, {0x8, 0xfeb}]}, 0x14, 0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x244800, &(0x7f0000000600)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303737372c6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303032303030303030303030312c7569643d2235b8b9ba43ec3203e22ce57294cdbedb67dad63a207eeb969fa02beaf28f128171827e584dfe85c5c57a771749eea317f144b667be631373594bcdd6dcb7570239be6763a6f882fef3f0727493c68cf5a08eedc1dcb7bd050a7619023f27c57018", @ANYRESDEC=r2, @ANYBLOB=',Tt]>3', @ANYRESDEC, @ANYBLOB=',obj_user=\\,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) creat(&(0x7f0000000000)='./bus\x00', 0x0) 13:46:22 executing program 4 (fault-call:7 fault-nth:5): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 464.980009][T12673] debugfs: Directory 'loop0' with parent 'block' already present! 13:46:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:22 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x7f510100}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 465.146294][T12683] FAULT_INJECTION: forcing a failure. [ 465.146294][T12683] name failslab, interval 1, probability 0, space 0, times 0 13:46:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 465.234739][T12683] CPU: 1 PID: 12683 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 465.243454][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.253518][T12683] Call Trace: [ 465.256828][T12683] dump_stack+0x11d/0x181 [ 465.261211][T12683] should_fail.cold+0xa/0x1a [ 465.265826][T12683] __should_failslab+0xee/0x130 [ 465.270700][T12683] should_failslab+0x9/0x14 [ 465.275263][T12683] __kmalloc+0x53/0x690 [ 465.279833][T12683] ? __kmalloc+0x239/0x690 [ 465.284268][T12683] ? __follow_mount_rcu.isra.0+0x220/0x310 [ 465.290189][T12683] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 465.296346][T12683] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 465.302084][T12683] tomoyo_realpath_from_path+0x83/0x4c0 [ 465.307771][T12683] tomoyo_mount_acl+0xdd/0x590 [ 465.312654][T12683] ? dput+0xab/0x750 [ 465.316564][T12683] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 465.322828][T12683] ? ___cache_free+0x2e/0x320 [ 465.327786][T12683] ? terminate_walk+0x1d0/0x250 [ 465.332648][T12683] ? complete_walk+0xd9/0x170 [ 465.337407][T12683] tomoyo_mount_permission+0xef/0x350 [ 465.342806][T12683] tomoyo_sb_mount+0x3e/0x60 [ 465.347421][T12683] security_sb_mount+0x81/0xc0 [ 465.352204][T12683] do_mount+0x129/0x14f0 [ 465.356467][T12683] ksys_mount+0xe8/0x160 [ 465.360906][T12683] __x64_sys_mount+0x70/0x90 [ 465.365795][T12683] do_syscall_64+0xcc/0x3a0 [ 465.370744][T12683] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 465.376651][T12683] RIP: 0033:0x45b159 [ 465.380592][T12683] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 465.400428][T12683] RSP: 002b:00007f7a84ce1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 465.408998][T12683] RAX: ffffffffffffffda RBX: 00007f7a84ce26d4 RCX: 000000000045b159 [ 465.417042][T12683] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 465.425195][T12683] RBP: 000000000075bfc8 R08: 0000000020000080 R09: 0000000000000000 13:46:22 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x803e0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 465.433177][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 465.441262][T12683] R13: 0000000000000730 R14: 00000000004c87e1 R15: 0000000000000005 [ 465.449402][ C1] net_ratelimit: 20 callbacks suppressed [ 465.449412][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.460815][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 465.597992][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.603844][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.609654][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.615523][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.628096][T12683] ERROR: Out of memory at tomoyo_realpath_from_path. 13:46:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:23 executing program 4 (fault-call:7 fault-nth:6): mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 465.968264][ T8047] tipc: TX() has been purged, node left! 13:46:23 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xc0000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 466.332471][T12739] FAULT_INJECTION: forcing a failure. [ 466.332471][T12739] name failslab, interval 1, probability 0, space 0, times 0 13:46:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 466.588127][T12739] CPU: 0 PID: 12739 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 466.596862][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.607253][T12739] Call Trace: [ 466.610561][T12739] dump_stack+0x11d/0x181 [ 466.614934][T12739] should_fail.cold+0xa/0x1a [ 466.619570][T12739] __should_failslab+0xee/0x130 [ 466.624447][T12739] should_failslab+0x9/0x14 [ 466.629116][T12739] __kmalloc+0x53/0x690 [ 466.633292][T12739] ? tomoyo_encode2.part.0+0xd9/0x260 [ 466.638682][T12739] tomoyo_encode2.part.0+0xd9/0x260 [ 466.643917][T12739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.650307][T12739] tomoyo_encode+0x34/0x50 [ 466.654752][T12739] tomoyo_realpath_from_path+0x14a/0x4c0 [ 466.660444][T12739] tomoyo_mount_acl+0xdd/0x590 [ 466.665225][T12739] ? dput+0xab/0x750 [ 466.669246][T12739] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 466.675510][T12739] ? ___cache_free+0x2e/0x320 [ 466.680314][T12739] ? terminate_walk+0x1d0/0x250 [ 466.685183][T12739] ? complete_walk+0xd9/0x170 [ 466.690011][T12739] tomoyo_mount_permission+0xef/0x350 [ 466.695418][T12739] tomoyo_sb_mount+0x3e/0x60 [ 466.700092][T12739] security_sb_mount+0x81/0xc0 [ 466.704870][T12739] do_mount+0x129/0x14f0 [ 466.709279][T12739] ksys_mount+0xe8/0x160 [ 466.713544][T12739] __x64_sys_mount+0x70/0x90 [ 466.718246][T12739] do_syscall_64+0xcc/0x3a0 [ 466.722825][T12739] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 466.728726][T12739] RIP: 0033:0x45b159 [ 466.732695][T12739] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 466.752560][T12739] RSP: 002b:00007f7a84ce1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 466.761026][T12739] RAX: ffffffffffffffda RBX: 00007f7a84ce26d4 RCX: 000000000045b159 [ 466.769157][T12739] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 466.777209][T12739] RBP: 000000000075bfc8 R08: 0000000020000080 R09: 0000000000000000 [ 466.785276][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 466.793260][T12739] R13: 0000000000000730 R14: 00000000004c87e1 R15: 0000000000000006 [ 466.802414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 466.808209][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 466.878017][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 466.883844][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 467.290992][T12739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 468.340624][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.362299][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.388373][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.417125][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.438217][ T8047] device bridge_slave_1 left promiscuous mode [ 468.444497][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.501835][ T8047] device bridge_slave_0 left promiscuous mode [ 468.528114][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.584819][ T8047] device veth1_macvtap left promiscuous mode [ 468.601491][ T8047] device veth0_macvtap left promiscuous mode [ 468.607735][ T8047] device veth1_vlan left promiscuous mode [ 468.628027][ T8047] device veth0_vlan left promiscuous mode [ 470.238446][ T8047] device hsr_slave_0 left promiscuous mode [ 470.298181][ T8047] device hsr_slave_1 left promiscuous mode [ 470.360618][ T8047] team0 (unregistering): Port device team_slave_1 removed [ 470.371613][ T8047] team0 (unregistering): Port device team_slave_0 removed [ 470.382105][ T8047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.421998][ T8047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.512078][ T8047] bond0 (unregistering): Released all slaves [ 470.927415][T12765] IPVS: ftp: loaded support on port[0] = 21 [ 471.007497][T12765] chnl_net:caif_netlink_parms(): no params data found [ 471.047813][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.057596][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.066073][T12765] device bridge_slave_0 entered promiscuous mode [ 471.076167][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.083855][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.094105][T12765] device bridge_slave_1 entered promiscuous mode [ 471.117294][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.129081][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.150018][T12765] team0: Port device team_slave_0 added [ 471.156976][T12765] team0: Port device team_slave_1 added [ 471.172027][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.179071][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.210048][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.224360][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.231600][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.257646][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.320157][T12765] device hsr_slave_0 entered promiscuous mode [ 471.368474][T12765] device hsr_slave_1 entered promiscuous mode [ 471.438084][T12765] debugfs: Directory 'hsr0' with parent '/' already present! [ 471.469785][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.476978][T12765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.484347][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.491420][T12765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.527026][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.539443][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.547694][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.555893][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.568722][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.580364][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.588950][T10685] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.596026][T10685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.621054][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.629678][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.636807][ T8030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.645763][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.655415][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.664423][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 471.672914][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 471.684973][T12765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.696467][T12765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 471.704728][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 471.713642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 471.729521][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.737306][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.749062][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.799479][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.809271][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.828451][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.837200][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.845995][ T0] NOHZ: local_softirq_pending 08 [ 471.846300][ T0] NOHZ: local_softirq_pending 08 [ 471.855513][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.864622][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.873545][T12765] device veth0_vlan entered promiscuous mode [ 471.884458][T12765] device veth1_vlan entered promiscuous mode [ 471.901031][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.909507][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.917789][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.927198][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.941036][T12765] device veth0_macvtap entered promiscuous mode [ 471.951132][T12765] device veth1_macvtap entered promiscuous mode [ 471.964598][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.975320][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.985786][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.996460][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.006650][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 472.017617][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.027673][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 472.038777][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.049774][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 472.061233][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.073523][T12765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.081611][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.090390][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.098675][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.108532][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.119606][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 472.130594][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.140931][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 472.152011][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.162415][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 472.173496][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.183488][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 472.194053][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.204153][T12765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 472.214724][T12765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.226116][T12765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.235183][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.245002][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:46:29 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x3, 0x1, 0x9, 0x14, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sec_ctx={0x12, 0x18, 0x1, 0x3, 0x86, "64287ab3e8285c1000a3958860ccc7f69d0acfde5589b397ce74cf44739e813d78f8c86a8b65e9eca314a8e567356ce8135c3f5ade8df6785c960ed1ce0a94a423fa2854f389f843808b0c4fa0742a763b1558745049217c7f3127026b32c15c797917fa211585d88baf762073724405f026cda670847c0cfbc2d6fccb6a2f24bd8c265b3bae"}]}, 0xa0}}, 0x4048083) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff000e4000633277fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 13:46:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:29 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xc03e0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x20000, 0x2, &(0x7f0000000100)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {&(0x7f0000000080)="afafaf49fcd076fc44fcca5344d35814d02b7601d280cf0caa58deae1ad5afc58d342328c8ad7a91463c739e3ff535763d774fd429bbab4aab05176145161bd8cfd1b5eefc4b6d1d1df7d9ff0b6343bb4c75840fb17be7d9faadce75570df5e351c43b47a73e012f660854a08689715272292fa5e81a5dd8a9c0791f2af9", 0x7e, 0x3ff}], 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x30, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80000, 0x0) 13:46:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x5dbb, 0x6, 0x4, 0x80000, 0x80000001, {0x0, 0x7530}, {0x4, 0x8, 0xc, 0x7, 0x1, 0x1f, "b8da1ee6"}, 0x7fffffff, 0x4, @offset=0x80000001, 0x1, 0x0, 0xffffffffffffffff}) timerfd_create(0x1, 0x0) sendmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10, 0x109}], 0x10}}, {{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="9fb4327ce8e143a6c977705820f7bf35b6b17f1529b028d9623e68993e5285aa8e35cc227298b3b72b384a80141c6080b65e55cdb851c6cb6e535ae28e1d6af456fa8ff756cae0edba", 0x49}, {&(0x7f0000000340)="4da618770b72322fe4418ef4eeccb7f7217e2547f00cea0ed4743e6d58ca2545213f7d8019139a79d4fd1bf680be8cfa301f1896eb6524269d584242e49d72901e2b99ebc0d408e759595f35ddebabfb2987bc29d7aface0d8d13be93dfe8da9378845d4015943a7c2008bde9831e2e96313bb0ce9a66064427dcbdda289898c3400886fadf633de7c07278cefd44d598be2aa3138cf753efb35f5962cbf83eb87dd87aa260e295fc548793e8bc8309ba47fa1d7541d8c73392b930052064a830cda8f2e66bf6e056194f1074d0a", 0xce}, {&(0x7f0000000180)="67a29da69c3202f3eb73", 0xa}, {&(0x7f0000000440)="4ea36f68c01c33e0d844edc1f3de669aa6ad99ef2421cc27b8027c71c2084aad99d87460197bde50c42ac201d312cdbb01569b4a778a103f1d5b3dbe3fc85c3f84b55789c780054d949fd4f377dc28c111134dd48e63df1ae81ce6a3c36fdfe392d1c419afdd296d432937271102ded2a049b661a01a666fa7c7ef4cc891cb6a216b2edb77037bc596a24e68196888a1c78c6e69d901592463915f8349c549b6f9c7290789a39ba715bb3bfc2727d36105928a4de662fda94401214e", 0xbc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001440)="95eaa80e01c8db2652ffa0904848b5f62cb24159ca58d3d31ff2359395c362c0fca85ab27304364e6c76517af0c4eef3d5d405371378b9a88ed0e088f1464b2c4fe9bee00d327081f04029fc37a95871b6ad8c2f3c3324cf87ab6223b49da758f14104973f0b0acc5550cfc1728ea12962a9b83010cdac0c05a89c8a3d14224d", 0x80}], 0x1, &(0x7f00000005c0)=[{0xd8, 0x109, 0x2, "d9c207dd3455b5d270063888aaa2147242252fae5544c235e7a16dad6f32c239c520ee2e0d05d7b9649af31714cbfcc1a0edefced9ac8d999e8b097e41b65e826143e95422670f66d46b168cd67233ade6e8cceceaf314f49d388e7b7ac984d6b129e6419d7509c0ceb2137d3e0cc446f223bd2439a63605909d5b81849c53e65f857e3dbfc258bae1a0ad613b3d9e1df1803e3c00b39a9c721bd35efd8a67759d26767b09910012d746b31a4918db047cf8ef7b4581fc6bf2f4c1d01bc0b5d64bd12dd680"}, {0x40, 0x119, 0x2, "36f860d39b599bf96d48c5362b53504126fac9962123b344365f56a3d60bf59b7bb99110779e162f41fe0df6a78b7f1f"}, {0xd8, 0x12c, 0x2d, "fa67358e175dc82b66113dba1fdb1554d0226c7b37641230b5b9e05c123a8007aaeb569be4269bc72ae187fe173b386758eaecaaf4db4948469ef6e238b9cdb1d428b5a405a85e8d68fe3445c134bd5a4fc90efd1084db52ea59ac16a77543961fc7e24ce906d9247f1ddf648fa8855e3ea016decc80ea23124f0675518e60f5403a87ee5d2f09c6cac4de66aa60ea183d5ad8fe2ed19f1d244741603dc62eff1fa53915cd1243db411d7ae0960745d5de422a416c13437f39562411cdcc66187f8f2256327180"}], 0x1f0}}, {{&(0x7f00000007c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)="9ef32c6e185f7d59eaeeb5103ecf547b09255a01b0acb0d0939bfae8704fbec823f058bebd11df95e8edd6ab6e72aed933fcde133971a7be1b08aed9ffd85429a469b3e6e5738e89c6da6178cd57586761778603b963ff772b6ffd3c9c2ac0dafc2448f02c4463b51f9c206496b895947a41f00041e0ea4d63cfa5409602078afb26aa3d3109307c71766bf0e3139e12fff59e7e314a85ad93723695a3509cf68147e6dd1eeef07cde7f527f775f0acb39b469d6fe2cda71d168", 0xba}, {&(0x7f0000000900)="835d50a05b5973bbdf38fe72c54f764cd40b524e7636bc4c19e6a81df28a2407cb74286508c8e19081e805636c04542b7f7b1547bbdec894c71b8c3c83964b0926dad74a03f6dfd3bbe3b534a7b273555d9cd457100f00cd16eae5cf87152b8c4761558de16c0d1cfac58bd51093e964b5d1bb3315e5198fd8d1946b33be0382ee933c2f7e2a848abfdf903e3e39e4d260abef833f63202faaaab9dc161b887396ed7a8b15bcbc631006d682200a79f52d3a3878125489ee3a3b0b409ebba9548edf60010c8a217f03c548a3cc18d008916a3c1812837269971a6d3791518145b335", 0xe2}, {&(0x7f0000000a00)="5ab0aee7046509a5acb79d4d3cf292656d82a449d0787af6bb8be6d049f6762e90b21e44cad0530a2186ecb6ac12f4a603b70024de6c43", 0x37}, {&(0x7f0000000a40)="d09b9e194f5efa120f377393", 0xc}], 0x4, &(0x7f00000017c0)=[{0xb0, 0x100, 0x3f, "c76af31489b26a1f92f3143bc9eba71722028e12f741496061c5a733ffa59d80c21cdf079c8b93b774d385e2ae1df15d2b450c4d432bacec9b6a5bf4afe95d173f6c6b17d9be42f8fbfca0292899c82ff5a538ff251b017db69262f0aa2aa1d694c2735796cd0d1a4ae3b0ae7b7fad0494a892275a58c711f69fe5176c6914e19a717d097bc9b4f65e28d0d1129bcdcf23f8164a291c0268125de020c39327"}, {0x20, 0x1, 0x0, "a6cbf968e6f721e14799091ed89e"}, {0x40, 0x0, 0x4, "d407e149e25e283817db559ac708fef0149b5a51447c64c338662fd19308922e9ff94ab889f340a7389fe334c130a1"}, {0x10, 0x117, 0x9}, {0x18, 0x0, 0x7, "f55a0b1e56"}, {0x1010, 0x113, 0x2, "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"}, {0x48, 0x104, 0x5, "0e16bfc23bfdb3b0d6db62d62ae2a400399e0f15f26e245aa033b02d2bbbf3e90544963f348fd999d3e697727f352c50aa69f8"}, {0x70, 0x119, 0xd6ca, "468134a492210cd675f1c3325ec481d9b5afff76187fa90f120e9a372fa61a2d2ee5ab246e4c4533fa98c14d09508eeac077c915ad5e4fcbb5d8db63eba6813b7d58574afb1f7df045f1b244f850c04d531ff0fdaf27983528a75a9561"}], 0x1200}}, {{&(0x7f0000000ac0)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b40)="1890b4e67c40119971bd186568d2c664ad01a1890f93b2871c6ed477612e214ea25652bb5fd1617f660c2bce1a11369f65dbab0a0a064e160b30b2af9b70f87303a141cb333803b9d9550e4a885f5f3f769e088d1ddd44e1da253ac31125620139d036da415a7fa4a6e015b56cea883b4e1ae3c402cbbc2ba6fcba3e0244ed8dfdf82b28c8d0cf5273", 0x89}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)="0df321c464ee78f06d6d255b7befb2dbbefe563b548308300f976ea412", 0x1d}, {&(0x7f0000000c80)="dcb93e3d131fde8f6a1aec2265286dbcf9f4c0ad0ae24efdb3a3cfa05080bf62a6937199457863d674f45c13ef18d426af33dc335117b5705875db76b98647f6fb8ec953d8c38974d5550e687f1f908f04df940883d6c835761e70fb97f91716978bc888337bde44b0ba504a6c7418fd66cb02b9f9ce608ae56268b40cfe35fece255513549eddfbc0a59680b9cdfdb9002a64022d712accd29385d3d0ef29637f9975d4c56b3e21b5cce689ca1e3b02c2593bc1cb72320a7d77cdb2edbc67fa84746a0086f6dde49fc0e69f7852aa95aa19181f5902", 0xd6}, {&(0x7f0000000d80)="119ce2addca5c99bc5193d8dfe3273449d5f50dc70bd744413ae5f54bcb6714bb5bf57f169e19eee7d22f5ace2b8d8644b7d631333fb2075ab5ed95daab24f4d49e205597d9652421fef83dfaa4170c4398fcb57939d459ad3762b04e27b93fb5771151d325d3bf56e9180137d2324a65315d4729cd1e8c9e5c59a06fd2a09a41ec8c358f26f78ae46c006dd72d1bc30dd2a72635458af25361bbe9d2bb5140bffe915392832830799f595089367201112dfbcbfb405e4fb0bbffb8c60f0ebe39a698fd8e5946159910c13746050", 0xce}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f0000000e80)="a6f9efc4fcfaf70225c4865e1fd141547250751deeddbb8a60f6f44848fbed2c31ee040bd48a74f427c1a8cf571a42839cb30a5c223c6e2551d8737b57be33af36a8ff6fba0873d55e52326deba9bf5cc6141c70cfb24cf4065fd68b87743278b06eb1d480f0861dd139f076eb6d2e042f2d1d7c34273d3efdad9aff2a874cb4c44adc024de478b49f030be04489ad16", 0x90}, {&(0x7f0000000f40)="f640a918dbb18b02770faaeb242b414ff50948295a4d355982f1ebb350692a3a4564b01a30a6cc40edecc25e14e01c8f37c08bcd284db68db1ba1765f0d45f9b0c92fac69dff35c3b2155bc6eac2414225fcff5f3bc0ad71c09b037f2cd02965f66dc93c65b2e744fc55e6c0a53d", 0x6e}], 0x9, &(0x7f0000001080)=[{0xc0, 0x101, 0x8, "ec3626824c85b48a103992786aea6542233d1e5c5ad1b1ab81d3fb74a3c20b5adf5c335089910193b6e6ffb61814d7ae46bf1c3f7e7e23308d27557e350b36ff7d1f68e483a6f77ece019deecdced420018b3c34a256270baebfe9043b7e86142c70f36d7173afa7bfbe9002a77879f775f2468210c4d2d489cfe72bf9c5b2f8fcc17fa13d25350a1b12af50ac0f9c84431d6660c3e6b581da19784ad79fb23d382459097486799a4f4acd68"}], 0xc0}}], 0x6, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200000, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r5 = dup2(r4, r2) accept4$packet(r5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x400, 0x803b1c5d809257a3) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000001340)={@null=' \x00', 0x0, 'ip6erspan0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$SIOCX25GCALLUSERDATA(r7, 0x89e4, &(0x7f00000014c0)={0x2d, "d81d6ab93c8634a533f0d35b2202a8f47a1f48b57d204701859651e8e767b305f0d991ba377de4865490e4708b9ae9ccf460fa0281c4da8b313a168f70e5404ef128924076e8a9730af391c784bad24240a7c2c153110f3f7f753346265b7dd5613b240e6d02303881fc71e2c3ad44f01dd5db9e01e0b86020bcebb47622f664"}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000b80)=r6) sendmsg$nl_route_sched(r1, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000012c0)=@delqdisc={0x80, 0x25, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {0x1, 0xf}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x6, 0x2, 0xfff}}, @TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_STAB={0x38, 0x8, [{{0x1c, 0x1, {0x6, 0x9, 0xfff, 0x8, 0x1, 0x2, 0x747, 0x9}}, {0x16, 0x2, [0x7, 0x100, 0x7f, 0x3ff, 0x9, 0x8, 0x3, 0x8, 0x4]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000050}, 0x82) 13:46:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:29 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xe03f0300}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x6, 0x9, 0x3, 0x10001, 0x3, 0xffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xd85, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 13:46:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:30 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xeffdffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x100000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 472.971798][T12804] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:30 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0xe1) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x17400, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000600)={0x5, [0x2, 0xffff, 0xfff, 0xfff7, 0x2]}, &(0x7f0000000640)=0xe) socketpair(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) getuid() r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) statx(r5, &(0x7f0000000340)='./file1\x00', 0x4000, 0x40, &(0x7f0000000800)) lstat(&(0x7f0000000380)='./bus\x00', &(0x7f0000000980)) r6 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r6, 0x2285, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) getgroups(0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) [ 473.019788][ T8038] tipc: TX() has been purged, node left! [ 473.038002][ C0] net_ratelimit: 2 callbacks suppressed [ 473.038011][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 473.049441][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:46:30 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xf6ffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 473.119722][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 473.125508][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 473.131302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 473.137038][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:30 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="2e22df9fc3417756b08f184086d21dbaff95c19f237dcb14625b9b57db1be958d15fac76894e637c8f32427a44df3f492d15d31fafe4ae1499bcf6fc00ccd7f92fce81e60c473a50"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x100) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000040)=0x6000, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/39) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x2f00, 0x0) 13:46:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:30 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xfeffffff}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) [ 473.521831][T12811] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x200000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:31 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xff000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) [ 473.917985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 473.923919][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:31 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fadvise64(r0, 0x1, 0xfffffffffffff800, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa300001e0000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffff72f250d80500000000006504044c010000000404000001006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3c87bb07eb78c27b063773f04a22ba8cedf8510e63fb112cf6956e09d1938013c217e0f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x10, 0x1b8, &(0x7f0000000440)="a673f3cbe5549d7bf23ccf69b24fce05f1a282eeab050000030000810ae63238f9cf8c0ccade00556e97d003cc298213f230d6841f3099e19fd903b2ffa5106c71ac0000000000000400f069737d63ab32be2a651d7cee2970a9df488c168433cc01000080a4e46b6449ae6702031c92a8b4b6376f9972f3848c104d413745d45c49328a205cd201d8f3b62d898eef11a85540fcb60bb71ee8b619", 0x0, 0x176, 0x0, 0x42f, 0xfffffffffffffeb9, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f70180000000000000000be260a48e8c37d2ea3a52026012d3", &(0x7f0000000380)="0916c488652cc7578146166e75f067cd68cca94456926770bc95f142b4f6841c219a4dd8e134a0daf3278df5772a3e585523a544072e2f5bced331e0e9235f16"}, 0x28) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002e80)=[{0xffffffffffffffff}, {&(0x7f0000000500)="b533106058f73af3097114db756f55e596941e4ddcb7d720f357a2994cf2eddbe82624df99f57d945dc0f02ffa1ec42d26fefc9207dacc8c62d8044c93dfe00ed1d6628016d60518cbe839d99f63c86e46e050a7433ead99896649e8a790d8e29dde4cb3719ca55a2832c30b5a3e2266842b26af1ead2ed4777bc5b6e89e65468fc7dc184a", 0x85}, {&(0x7f00000005c0)="92d9cb267b07851b1ca7f52ff81837e02cba17daa020c56556e5cd1d4eb23bd210c16e2130d16f32e2a72db1ead21685e92ddff1ea0c098e27c0b5ee847122525d2ad48214f7a55e8797be59a0c2f3f76b57c01d84ffa269e553adeec7b3ea", 0x5f}, {&(0x7f0000000640)="a6f71a66f7b11a406484cec60a80b8ec9da481d9d024c3bf6259c931a2b74a8e1306612170a6d87ec248b3ce0861167d37e698851d95197d49b613ac7a423e71a903d0", 0x43}, {&(0x7f00000006c0)="5aeb2a0281fe9deded2a66cb4e4f5a81d15ba01a31f21c535cf33e4b50392b6a164b8c68a1231d3f10cddb628041af1f9ad5d6df02f29d9fd9f76613192121793d2bc1779c97d4b519d7af93d99c3f2c33a774372b2e5a83a1c93fed66731c19b2e0c01c96d8932f17c62e36c2f07ad6ea11d2ed19180c5498af87fb794089fa183fef5f52", 0x85}, {&(0x7f0000002cc0)="9c3a33650dd3db3583f25fc67fe643acce938fab4ec4bcab3b4355fa85600d3186db158b00576710afa2b06db8378e072b5666a1fb2f780c553ba06b44ec51c16eb1f461a8d10ef22f184bfb6e4a825d56ec5a591a4b895b224472c3afdc74303e7bf4bb1285467935e78f861d83eec2bbc40d19d1d158f179b1b39aaa74d8f196374f4f8cb07f02539ef0a6038f73a727b9d9bfbb3905123a31e7cbfc7265438932ecef84a3bee19d27abe45fdb1627b024a950d2d62646b4b823b296da1291f77c91b30506fc099f620a5a6c192b32750906aab29dc9662b30397c12f8babc5ba515d3cc4781edf01561d6f39bf15e18519f", 0xf3}, {&(0x7f0000002dc0)="5ec0b63bb9152cc7b196bbe2972e8b512327d965f360fcf7ebe1265f458da3303a6060aaa17e74adbaba28934a7749b30b4b73175c9ff82ec09f0b52019192857284b7a4d2a985ef18bbc2433007c1c194cff22358ee1e7fbf6282dcd224331804f0995dca36ce84d06c8b35dd456623d9b11bd733f634d12fd25b13fe09b2b8e4cd11f4412f49107b5a19", 0x8b}], 0x7, &(0x7f00000019c0)=[{0x18, 0x10b, 0x80000000, "af"}, {0x1010, 0x84, 0x1, "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"}, {0x178, 0x101, 0x3, "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"}, {0x40, 0x119, 0x2, "2904c2255cb5ce2fb3c1e9e429bde1050a32a2e1eb5dc1d323740227efdc964b39a60592c2ab21bf33a702a2d959c4"}, {0x108, 0x7bd963740512ddda, 0x2, "3a7e4083cf2c0257c306f32474f8cc7589f696f8a60039609008adf57750345102970c90c76ab312b41036eb20507bedda388755b5945a6de25915dc43960cb524288f8c8b22bb6fe2ca280b653a710ab4fcc72f17a44e94df0ab52c5c707a252902b6a1d00b912367526758ab000bfd941743dd35381e6efaa29f8f46b76190a5c3a0f7760c78459f8daf68c1433a21b604e3caed7fa49fae084f6f37e5ff49dd79e225d8b37eedeb49e5d5f5bd196b8bf5c5acdc180245ef3df36de28ad93ddb3e996b2e8a7369fdf049703478ea148a4f6715314db0403b68bbc022a1d2a631ff5841dbd9dce4758563502e32fa1f35c3615ba036f1"}], 0x12e8}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000100)) [ 474.158055][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 474.164012][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:31 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xff0f0000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 474.944524][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.961418][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.001873][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.018100][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.029306][ T8038] device bridge_slave_1 left promiscuous mode [ 475.035484][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.078904][ T8038] device bridge_slave_0 left promiscuous mode [ 475.085109][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.162461][ T8038] device veth1_macvtap left promiscuous mode [ 475.178900][ T8038] device veth0_macvtap left promiscuous mode [ 475.184976][ T8038] device veth1_vlan left promiscuous mode [ 475.198703][ T8038] device veth0_vlan left promiscuous mode [ 476.311152][ T8038] device hsr_slave_0 left promiscuous mode [ 476.398138][ T8038] device hsr_slave_1 left promiscuous mode [ 476.470801][ T8038] team0 (unregistering): Port device team_slave_1 removed [ 476.481252][ T8038] team0 (unregistering): Port device team_slave_0 removed [ 476.491263][ T8038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.542314][ T8038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.622293][ T8038] bond0 (unregistering): Released all slaves [ 476.725292][T12888] IPVS: ftp: loaded support on port[0] = 21 [ 476.779686][T12888] chnl_net:caif_netlink_parms(): no params data found [ 476.810391][T12888] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.817792][T12888] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.825887][T12888] device bridge_slave_0 entered promiscuous mode [ 476.833692][T12888] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.841293][T12888] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.849496][T12888] device bridge_slave_1 entered promiscuous mode [ 476.866613][T12888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.929684][T12888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.950556][T12888] team0: Port device team_slave_0 added [ 476.959093][T12888] team0: Port device team_slave_1 added [ 476.975339][T12888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.982547][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.009589][T12888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.021710][T12888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.029703][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.056744][T12888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.160485][T12888] device hsr_slave_0 entered promiscuous mode [ 477.198599][T12888] device hsr_slave_1 entered promiscuous mode [ 477.268075][T12888] debugfs: Directory 'hsr0' with parent '/' already present! [ 477.315018][T12888] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.322143][T12888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.329526][T12888] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.337638][T12888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.374575][T12888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.387074][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.395467][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.404497][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.418380][T12888] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.430539][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.439543][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.446988][ T8042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.471712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.480608][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.487720][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.496846][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.506388][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.515645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 477.526443][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.538744][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.549038][T12888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.564618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.572377][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.583732][T12888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.649073][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.661456][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.671257][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.682118][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.691278][T12888] device veth0_vlan entered promiscuous mode [ 477.702303][T12888] device veth1_vlan entered promiscuous mode [ 477.720653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 477.728862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 477.737678][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.748526][T12888] device veth0_macvtap entered promiscuous mode [ 477.757961][T12888] device veth1_macvtap entered promiscuous mode [ 477.772474][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.783065][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.793321][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.804627][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.814918][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.825373][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.835595][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.846226][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.856097][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.866671][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.877914][T12888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.886262][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.895358][T10685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.905301][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.916310][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.926609][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.937548][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.947412][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.958153][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.968126][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.978559][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.988689][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.999261][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.010354][T12888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.019537][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 478.029153][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:46:35 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:35 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xfffffdef}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x5408, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d07000000000000000000800000", @ANYRES32=0x0, @ANYBLOB="000000006c40c3fd6f36000100626f6e64000000000c00975f5f6f5f020008000900010000000000a629a5e8"], 0x3c}}, 0x0) 13:46:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400003, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 478.212642][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400004, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(r0, 0x540a, 0x7ff) openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) sendfile(r2, r0, 0x0, 0x6f0a77bd) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x180a000, &(0x7f0000000100)={'trans=unix,', {[{@version_9p2000='version=9p2000'}, {@aname={'aname', 0x3d, '/dev/ptmx\x00'}}], [{@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@dont_appraise='dont_appraise'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x62e080, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000240)) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) 13:46:35 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xffffff7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:35 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xfffffff6}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:38 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400005, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:38 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xfffffffe}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x7) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) [ 481.358237][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 481.364621][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:46:38 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x4000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400006, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 481.447979][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:46:38 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$TIOCCONS(r1, 0x541d) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1e, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 13:46:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:39 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x40030000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:41 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400007, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:41 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x100000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:41 executing program 3: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x40030000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:41 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x200000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000240)={0x1, 0x8, [{r3, 0x0, 0x10000}, {r0, 0x0, 0xfffffffffffff000, 0x2000}, {r0, 0x0, 0x10000, 0x2000}, {r4, 0x0, 0xfffffffffffff000, 0x4000}, {r1, 0x0, 0x4000, 0x1000000}, {r5, 0x0, 0xfffffffffffff000, 0x10000}, {r6, 0x0, 0x2000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x8000}]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13:46:42 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x300000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:44 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400009, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:44 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x400000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:44 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xd29876f6fe921811, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x5400) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r3, 0x29, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb8, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr="8e1ba75900033a1c50bfeda00866dc31", 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f11}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8051}, 0x1) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sync() 13:46:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000240)={0x1, 0x8, [{r3, 0x0, 0x10000}, {r0, 0x0, 0xfffffffffffff000, 0x2000}, {r0, 0x0, 0x10000, 0x2000}, {r4, 0x0, 0xfffffffffffff000, 0x4000}, {r1, 0x0, 0x4000, 0x1000000}, {r5, 0x0, 0xfffffffffffff000, 0x10000}, {r6, 0x0, 0x2000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x8000}]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 487.598038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 487.603878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 487.625115][T13065] tipc: Failed to obtain node identity [ 487.648154][T13065] tipc: Enabling of bearer rejected, failed to enable media [ 487.678009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.683980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 487.689783][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:46:45 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x500000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 487.695550][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:45 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 487.775738][T13077] tipc: Failed to obtain node identity [ 487.799306][T13077] tipc: Enabling of bearer rejected, failed to enable media 13:46:45 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xd29876f6fe921811, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x5400) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r3, 0x29, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb8, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr="8e1ba75900033a1c50bfeda00866dc31", 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f11}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8051}, 0x1) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sync() 13:46:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:45 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x600000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) [ 488.122958][T13096] tipc: Failed to obtain node identity [ 488.145233][T13096] tipc: Enabling of bearer rejected, failed to enable media [ 488.317999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 488.323932][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 488.329742][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 488.335632][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:47 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x700000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:47 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x40000b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:47 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xd29876f6fe921811, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x5400) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r3, 0x29, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb8, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr="8e1ba75900033a1c50bfeda00866dc31", 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f11}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8051}, 0x1) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sync() 13:46:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r2, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:47 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0xd29876f6fe921811, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x5400) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r3, 0x29, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb8, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr="8e1ba75900033a1c50bfeda00866dc31", 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f11}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8051}, 0x1) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sync() 13:46:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r2, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:48 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x800000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 490.752841][T13123] tipc: Failed to obtain node identity [ 490.791222][T13123] tipc: Enabling of bearer rejected, failed to enable media 13:46:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x40000c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 490.867637][T13117] tipc: Failed to obtain node identity [ 490.886625][T13117] tipc: Enabling of bearer rejected, failed to enable media 13:46:48 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xa00000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r2, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r4, r5, &(0x7f0000000080)=0x81, 0x7) 13:46:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7277}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a00000000000000000000000100000001000000000000000000000000000000080012000000020000000000000000001f000000000000000000000000000000ac14ffbb000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe800b8909aa2edde06d0000000000ff0000000000000000"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x5, 0x4) lstat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setgid(0x0) shutdown(0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2040000) [ 492.319263][ T0] NOHZ: local_softirq_pending 08 13:46:51 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:51 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x1100000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x40000d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7277}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a00000000000000000000000100000001000000000000000000000000000000080012000000020000000000000000001f000000000000000000000000000000ac14ffbb000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe800b8909aa2edde06d0000000000ff0000000000000000"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x5, 0x4) lstat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setgid(0x0) shutdown(0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2040000) 13:46:51 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x2700000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 493.848223][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 493.854374][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:46:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400010, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 493.918010][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 493.923848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 493.929701][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 493.935460][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:46:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7277}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a00000000000000000000000100000001000000000000000000000000000000080012000000020000000000000000001f000000000000000000000000000000ac14ffbb000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe800b8909aa2edde06d0000000000ff0000000000000000"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x5, 0x4) lstat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setgid(0x0) shutdown(0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2040000) 13:46:51 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x7f51010000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:54 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400012, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:54 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x803e000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400014, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:54 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xc000000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:54 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xc03e000000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x50800, 0x0) clock_settime(0x7, &(0x7f00000000c0)={0x0, 0x1c9c380}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(0xffffffffffffffff, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0200c5569e232a8523af0cdd88b7a4ed1aa00000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x11, &(0x7f00000002c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r5, 0x0, 0x40, 0x0, 0x400}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x80, 0x8006, 0xfffffff9, 0x1, 0x1, 0x6, 0x9de, r5}, &(0x7f0000000140)=0x20) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc2642, 0x72) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r6}]]}}}]}, 0x38}}, 0x0) 13:46:57 executing program 1: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x52}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x26}], 0x2e3, 0x0, 0xfffffe96, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8200, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:46:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400045, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:57 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xe03f030000000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x50800, 0x0) clock_settime(0x7, &(0x7f00000000c0)={0x0, 0x1c9c380}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(0xffffffffffffffff, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0200c5569e232a8523af0cdd88b7a4ed1aa00000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x11, &(0x7f00000002c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r5, 0x0, 0x40, 0x0, 0x400}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x80, 0x8006, 0xfffffff9, 0x1, 0x1, 0x6, 0x9de, r5}, &(0x7f0000000140)=0x20) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc2642, 0x72) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r6}]]}}}]}, 0x38}}, 0x0) 13:46:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400047, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on='xino=on'}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:46:57 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xeffdffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002980)='/proc/partitions\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000002c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002b40)={0x7f, {{0xa, 0x4e24, 0x63, @local, 0xd8b}}, {{0xa, 0x4e23, 0x50, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$rds(r3, &(0x7f0000002ac0)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000001580)=""/193, 0xc1}], 0x4, &(0x7f0000002a40)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0xf36}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffa, 0xf7d}, {&(0x7f0000001680)=""/75, 0x4b}, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/160, 0xa0}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002840)=""/55, 0x37}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002b00)=""/5, 0x5}], 0x7, 0x9, 0x1000}}], 0x60, 0x804}, 0x45) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x29, 0x6, 0x0, 0x7c74ec8a014b0ee8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x20, 0x200000) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) sendfile(r5, r6, &(0x7f0000000080)=0x81, 0x7) 13:46:57 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xf6ffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:46:58 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0xfeffffff00000000}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 500.806851][T13285] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 500.937172][ T8068] ================================================================== [ 500.945498][ T8068] BUG: KCSAN: data-race in writeback_sb_inodes / xas_set_mark [ 500.953046][ T8068] [ 500.955394][ T8068] write to 0xffff8880ac474d64 of 4 bytes by task 13302 on cpu 1: [ 500.963111][ T8068] xas_set_mark+0x14d/0x160 [ 500.967632][ T8068] __xa_set_mark+0xd3/0x100 [ 500.972183][ T8068] __set_page_dirty+0x152/0x270 [ 500.977143][ T8068] mark_buffer_dirty+0x27f/0x2c0 [ 500.982176][ T8068] __block_commit_write.isra.0+0x11f/0x170 [ 500.987991][ T8068] block_page_mkwrite+0x226/0x230 [ 500.993043][ T8068] ext4_page_mkwrite+0x5ca/0xe50 [ 500.997983][ T8068] do_page_mkwrite+0x100/0x210 [ 501.003267][ T8068] do_wp_page+0xbf5/0xeb0 [ 501.007613][ T8068] __handle_mm_fault+0x1d16/0x2e00 [ 501.012739][ T8068] handle_mm_fault+0x21b/0x530 [ 501.017512][ T8068] __do_page_fault+0x456/0x8d0 [ 501.022287][ T8068] do_page_fault+0x38/0x194 [ 501.026806][ T8068] page_fault+0x34/0x40 [ 501.031032][ T8068] [ 501.033380][ T8068] read to 0xffff8880ac474d64 of 4 bytes by task 8068 on cpu 0: [ 501.041210][ T8068] writeback_sb_inodes+0x6e3/0xa50 [ 501.046358][ T8068] wb_writeback+0x1f9/0x6a0 [ 501.050962][ T8068] wb_workfn+0x22e/0x970 [ 501.055264][ T8068] process_one_work+0x3d4/0x890 [ 501.060638][ T8068] worker_thread+0xa0/0x800 [ 501.065156][ T8068] kthread+0x1d4/0x200 [ 501.069232][ T8068] ret_from_fork+0x1f/0x30 [ 501.073676][ T8068] [ 501.076165][ T8068] Reported by Kernel Concurrency Sanitizer on: [ 501.082431][ T8068] CPU: 0 PID: 8068 Comm: kworker/u4:5 Not tainted 5.5.0-rc1-syzkaller #0 [ 501.090834][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.100910][ T8068] Workqueue: writeback wb_workfn (flush-8:0) [ 501.106881][ T8068] ================================================================== [ 501.115139][ T8068] Kernel panic - not syncing: panic_on_warn set ... [ 501.121720][ T8068] CPU: 0 PID: 8068 Comm: kworker/u4:5 Not tainted 5.5.0-rc1-syzkaller #0 [ 501.130641][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.140805][ T8068] Workqueue: writeback wb_workfn (flush-8:0) [ 501.146774][ T8068] Call Trace: [ 501.150067][ T8068] dump_stack+0x11d/0x181 [ 501.154405][ T8068] panic+0x210/0x640 [ 501.158420][ T8068] ? vprintk_func+0x8d/0x140 [ 501.163011][ T8068] kcsan_report.cold+0xc/0xd [ 501.167705][ T8068] kcsan_setup_watchpoint+0x3fe/0x460 [ 501.173107][ T8068] __tsan_read4+0xc6/0x100 [ 501.177529][ T8068] writeback_sb_inodes+0x6e3/0xa50 [ 501.182659][ T8068] wb_writeback+0x1f9/0x6a0 [ 501.187170][ T8068] ? __this_cpu_preempt_check+0x45/0x140 [ 501.192876][ T8068] wb_workfn+0x22e/0x970 [ 501.197136][ T8068] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 501.203025][ T8068] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 501.209090][ T8068] process_one_work+0x3d4/0x890 [ 501.213972][ T8068] worker_thread+0xa0/0x800 [ 501.218600][ T8068] kthread+0x1d4/0x200 [ 501.222680][ T8068] ? rescuer_thread+0x6a0/0x6a0 [ 501.227522][ T8068] ? kthread_unpark+0xe0/0xe0 [ 501.232195][ T8068] ret_from_fork+0x1f/0x30 [ 501.238416][ T8068] Kernel Offset: disabled [ 501.242780][ T8068] Rebooting in 86400 seconds..