[ 40.861997] audit: type=1800 audit(1551881428.294:30): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.202' (ECDSA) to the list of known hosts. 2019/03/06 14:10:36 fuzzer started 2019/03/06 14:10:39 dialing manager at 10.128.0.26:39631 2019/03/06 14:10:39 syscalls: 1 2019/03/06 14:10:39 code coverage: enabled 2019/03/06 14:10:39 comparison tracing: enabled 2019/03/06 14:10:39 extra coverage: extra coverage is not supported by the kernel 2019/03/06 14:10:39 setuid sandbox: enabled 2019/03/06 14:10:39 namespace sandbox: enabled 2019/03/06 14:10:39 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/06 14:10:39 fault injection: enabled 2019/03/06 14:10:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/06 14:10:39 net packet injection: enabled 2019/03/06 14:10:39 net device setup: enabled 14:13:50 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x17, &(0x7f0000000000)='vmnet1%wlan1^-.Gvmnet0\x00'}, 0x30) ptrace$getsig(0x4202, r0, 0x7f0c426e, &(0x7f0000000080)) ptrace(0xffffffffffffffff, r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0xa, 0x2, @thr={&(0x7f0000000100)="9de2aa483c5293c2d9b6517d006126c25248cc3f798ad1e35ab2ff0d3ec57195d42a8c27f720792c62fb58cb7258b89f108147ce6b84fec8cc5c8f57f5daef9a7f717916af275595c900093514d712d99698d81610b1c423fc4af79fa3684d4fc81fb527fbcf74ea23e87c4ff627cde14772068d0e3ee11282bdff38c98355ffda3d28714e7d8159b5c2f7428000b4489d16cec6095a0b20d83ab7dd68714345632534372d7704b3cee04d5da116650d1e79b497ce5017d141b65a4780bce31ef762d90c", &(0x7f0000000200)="22a7d23c0975cc728a35b27dbec7ffc762721ea8b4647dcd900a52d1133e9643df33aee3c620af6b62788c"}}, &(0x7f0000000280)=0x0) timer_gettime(r2, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x0, r0, &(0x7f0000000340), 0x20000000, &(0x7f00000003c0)) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x301800, 0x0) ioprio_set$pid(0x1, r0, 0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000004c0)={'hsr0\x00', {0x2, 0x4e21, @local}}) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000500)) rt_tgsigqueueinfo(r0, r0, 0x19, &(0x7f0000000540)={0x2, 0x1000, 0x7ff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f00000005c0)={'icmp6\x00'}, &(0x7f0000000600)=0x1e) fcntl$getown(r4, 0x9) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r6, 0x120, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x20040000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x4}, 0x68) getrandom(&(0x7f0000000800)=""/97, 0x61, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000880)={0x40000000, 0x10f, "5dce8a6a92f5681a7e9d9ea6a2285d488546806c2b3981c2ecda76eeb507657f", 0x9, 0x100000001, 0x400, 0x8, 0xffff, 0x1, 0x52f5, 0x80000001, [0x100000000, 0x0, 0x2, 0xffffffff]}) r7 = semget(0x2, 0x0, 0x41) semctl$SEM_STAT(r7, 0x2, 0x12, &(0x7f0000000980)=""/17) ioctl$TCSETA(r1, 0x5406, &(0x7f00000009c0)={0x5c, 0x8, 0x9, 0x7fffffff, 0x7, 0x1400000000000, 0x81, 0x3, 0x6, 0xffffffffffffffef}) sched_setaffinity(r0, 0x8, &(0x7f0000000a00)=0x8000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000a40)=0x3) init_module(&(0x7f0000000a80)='wlan0:+self}selfvmnet1-eth0md5sum-\x00', 0x23, &(0x7f0000000ac0)='\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000b00)={@in6={{0xa, 0x6, 0x55, @local, 0x955}}, 0x0, 0x7, 0x0, "a5d39c73243f4bfd876d90c0659b4dc90b5714d1c714d2322e859455632faf3c134e07aadebf5ce5221a59dcce1bf0603a6abb80dec95cccc7c62d2e59407c4daf4d6d057148568218c95ef6ba0b7ec9"}, 0xd8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000c00)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r6, 0x414, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ptmx\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8) syzkaller login: [ 243.381806] IPVS: ftp: loaded support on port[0] = 21 14:13:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0x2, 0xd}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCNXCL(r0, 0x540d) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) r4 = geteuid() fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x4}, [{0x2, 0x2, r1}, {0x2, 0x4, r2}, {0x2, 0x0, r3}, {0x2, 0x0, r4}], {0x4, 0x2}, [{0x8, 0x1, r5}, {0x8, 0x1, r7}], {0x10, 0x1}, {0x20, 0x3}}, 0x54, 0x3) r8 = getpgid(0x0) ptrace$peekuser(0x3, r8, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000006c0)=0x0) ioctl(r0, 0xb3f4, &(0x7f0000000700)="e9eb54ba3eea56192a7f5dbdcff016ff7dde941643f61fbbedea9ab1a587b6590dd435b0ec68498f60c511ee198f3a51b7972669dc992d669bd4b23bb045b1b93b42529a921b210682bd54e1ba279934d9041a9118292fb55c54cfe88a89b90fea4b30df2aa14fb0fcbd0964ca874d391c056344798ad367dcdd69ff73ceae46232d76301ce85af57c861c458fd992be320f461ece6ddb17d3abd76b95dd4c451214c4c3d8af2a6c57b8289ad7bfb48a99a7e88b861bd62e7cb6ec9a337e90d6dd009eb1a933b0f1da2eb19eb929af810510083b66eb8aff85cae43658d6e402dcb408208b5854136295df12a27eb4339c8bfe8c88ff") setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000800)={0xfff}, 0x4) ptrace$getregset(0x4204, r9, 0x206, &(0x7f00000008c0)={&(0x7f0000000840)=""/66, 0x42}) lchown(&(0x7f0000000900)='./file0\x00', r3, r7) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000940)={0x0, 0xc6, "3bb85722002533b84f931824dbd6cf5027599e811db07c6c512f2a9bdac2ea8eca5e025dc5e9a1111fa51ff1083f5f2f2b9cc61d59408efcb226ae716947faa416870d006fef3d1daf25efb5a2ba26073433b2a2aa476ede4a666a77f9b916b2cbc1f90f21427baac44fb94fbda4392396200e1e50303c7cde54f3fcbb907c3d7f0f0cd27c941aeaa3b943e550eb8b02a940c5af9cf011986d960344a25b410fb01e499a451f9bac9cdf9aa9ebe5a4e3ef1b05281d4f2dba7b0ab96a859e2e5611144b3f719d"}, &(0x7f0000000a40)=0xce) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000a80)={r10, 0x4}, 0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000ac0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r11 = semget(0x1, 0x5, 0x400) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000b00)={{0xffffffffffffff16, r2, r7, r6, r5, 0x8, 0x3}, 0x82a, 0xfffffffffffff800, 0x1}) fdatasync(r0) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) ppoll(&(0x7f0000000b80)=[{r0, 0x400}, {r0, 0x2080}, {r0, 0x4001}, {r0, 0x10}, {r0, 0x80}], 0x5, &(0x7f0000000c00)={r12, r13+30000000}, &(0x7f0000000c40)={0x1}, 0x8) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000c80)=0xc000) [ 243.500119] chnl_net:caif_netlink_parms(): no params data found [ 243.557130] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.564490] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.573181] device bridge_slave_0 entered promiscuous mode [ 243.581257] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.598367] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.618324] device bridge_slave_1 entered promiscuous mode [ 243.643469] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.654012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.656862] IPVS: ftp: loaded support on port[0] = 21 [ 243.681405] team0: Port device team_slave_0 added [ 243.688202] team0: Port device team_slave_1 added 14:13:51 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0x1, &(0x7f0000000040)='\x00', r2}, 0x30) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) process_vm_readv(r3, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000380)=""/41, 0x29}, {&(0x7f00000003c0)=""/56, 0x38}, {&(0x7f0000000400)=""/151, 0x97}], 0x5, &(0x7f0000000c40)=[{&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/71, 0x47}, {&(0x7f00000008c0)=""/226, 0xe2}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/219, 0xdb}, {&(0x7f0000000b40)=""/210, 0xd2}], 0x8, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000cc0)=0x6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000d00)={0x0, 0x0, 0x10, 0x3, 0x7}, &(0x7f0000000d40)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000d80)={r5, 0x100000000}, &(0x7f0000000dc0)=0x8) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000e00)={0x3c9cad89d8ab1132, 0x0, {0x0, 0xde32, 0xd388, 0xac}}) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000e40)=@assoc_value={r6, 0xffff}, 0x8) sched_setattr(r0, &(0x7f0000000e80)={0x30, 0x3, 0x1, 0xffff, 0x100000001, 0x5, 0x7, 0x7fff}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000ec0)={0x5, 0x3, 0x8, 0x0, 0x7ff}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000f00)={'syz_tun\x00', 0x7}) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$inet_sctp(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f40)="2c688a78b5f9245dc087dad5f1b2ad2fae38b2350d533e0b190f05ed766c99a71b2fbdf700a84f469770221edc32543aa5a4cdde9b1b6d80c771d577747afcaa9354dbbe3a6688fc3947805755ee2fd5e95b73aa797530fa0e65c68c96ea90e5e93d4eb092e915ff8279a7abfde23fdee51ea43f3591dd3d275420915b82f7fdfe2467c3f4376bf37599e81fc2f0118b7fff2ca47b5602dce01984935ed0b8985d2b52dfd246000bbac2c63322222bb6fe36009b58b79e25473b1a0f3eeea53d051e6d2ae21f667997f12bd8b3cbbe760ee4ed1f3e4a227b7f4dcc809d3781adddcc50706f24", 0xe6}], 0x1, &(0x7f0000001080)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x1, 0xca, 0x5, r5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x80000001}}], 0x50, 0x840}, 0x10) r7 = syz_open_dev$radio(&(0x7f0000001140)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001180)={r6, @in6={{0xa, 0x4e24, 0x6, @empty, 0x1}}, 0xffffffffffffffff, 0x9, 0x4, 0x93af679}, 0x98) ioctl$KVM_ASSIGN_DEV_IRQ(r7, 0x4040ae70, &(0x7f0000001240)={0x7, 0x2, 0x400, 0x400}) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000001280)={'nat\x00'}, &(0x7f0000001300)=0x78) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000001340)={0x3, 0x1, [0x3, 0x4, 0x0, 0x4056, 0x5, 0x7, 0x4, 0x3]}) syz_mount_image$bfs(&(0x7f0000001380)='bfs\x00', &(0x7f00000013c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001500)=[{&(0x7f0000001400)="3b8e9cee961a0dc2f89393c32347c74c867fbc98b74945d9a916f053965200899382774565e4a170857e53885162c40653529d5eadaef7e7b1435f738046cbcb05f58466a65214e45ea67b5780bee2984e159bbcb288ab1c26dbef4293b150488aa86223ba22e064cc513346da81ca61dec01d4a554006f3db8cac4ed9070d4889615795341247899d3855f3c138717bb227517a3ee8", 0x96, 0x62}, {&(0x7f00000014c0)="d7df", 0x2, 0x6}], 0x2000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000001540)=0x2, 0x8) ioctl$CAPI_INSTALLED(r1, 0x80024322) openat$nullb(0xffffffffffffff9c, &(0x7f0000001580)='/dev/nullb0\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000015c0)={0x86, 0x5, 0x6, 0x4, 0x3}, 0x14) fanotify_init(0x21, 0x1402) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000001600)={0x100000000, 0x35315241, 0x6, 0x6, 0x3, @stepwise={{0x7, 0x4}, {0x1, 0xc7}, {0x4, 0x2}}}) [ 243.771141] device hsr_slave_0 entered promiscuous mode [ 243.808605] device hsr_slave_1 entered promiscuous mode [ 243.932662] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.939189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.946122] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.952568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.974680] chnl_net:caif_netlink_parms(): no params data found [ 244.007747] IPVS: ftp: loaded support on port[0] = 21 [ 244.076589] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.084384] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.091757] device bridge_slave_0 entered promiscuous mode [ 244.111675] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.118105] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.125467] device bridge_slave_1 entered promiscuous mode [ 244.146024] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.155731] bond0: Enslaving bond_slave_1 as an active interface with an up link 14:13:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x86040) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/234) r1 = dup(r0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0xc0000000, 0x0, "8fc76f72a8240c31e91957655800cd5c7531c0627a6490a8386d10db42836a6f", 0x7, 0xe2b000, 0x7c, 0x80000001, 0x7, 0x7, 0x1, 0x5, [0x0, 0x7fff, 0x81, 0x5]}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000097c0)={'team0\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000240)=""/177, 0xb1, 0x40, &(0x7f0000009800)={0x11, 0xf, r2, 0x1, 0x5}, 0x14) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000009840)={0x6, 0x7, {0x52, 0x4, 0x9, {0x9, 0x40}, {0x100000000, 0x2}, @cond=[{0x39f, 0x7c4a, 0x7, 0x2, 0x4, 0xffff}, {0x831, 0x8, 0x72c3, 0x1ff, 0x3, 0x9d}]}, {0x54, 0x9a3, 0x1, {0x3, 0x7fff}, {0x3, 0x280000}, @const={0x7ff, {0x5, 0x68, 0x7f, 0xdc8}}}}) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000098c0)={0x6, 0x6, {0x57, 0x2, 0xfffffffffffffff7, {0x40ea}, {0x5, 0x6}, @cond=[{0x7fff, 0x9, 0x3f, 0x6, 0x80, 0x5}, {0xfff, 0x2, 0xadd, 0x7a4aaac, 0x6, 0x1}]}, {0x57, 0x38a, 0xffffffffffff8001, {0xfffffffffffffffc, 0x7}, {0x7f}, @ramp={0x2, 0x101, {0x3f, 0x4, 0x1, 0xcb68}}}}) sendmsg$inet_sctp(r1, &(0x7f000000ad00)={&(0x7f0000009940)=@in6={0xa, 0x4e22, 0x6, @mcast2, 0x46d7}, 0x1c, &(0x7f000000ac40)=[{&(0x7f0000009980)="569651409aeb816bfc932ce887e5bc", 0xf}, {&(0x7f00000099c0)="1a83a0cddd3989a48335c58cb6f60590783eafb02028cd4021e6d47f7c41867aafa7f91ff104af94eedc6f9933d3154f5b87229c4e6267dded25a026ac8b650d344854fc64ad8ce3307cd1482e088ba48f1484e327059db9704323174c97a5477948a9cb73e7e064d8141997c75220bd7378e5ba676ca13a2e2f85922369d8c302dd62050b9a9b436c0ddd7616cdae", 0x8f}, {&(0x7f0000009a80)="53a995755072de98c7563b95ffb3cda801630ed8da4caf95f938f0497aee34b1cd2ef44793db103bb1ee4f45db2ad0911e50fc2433127a401d36b55bbed7cc54e4542715b186a1bae8804df5808641d824f9f361ca31a9ff9b2151349572431ebca5c0a87a180552b9e080b3ac87dbf8c186342260586b3dbe137746c74c856b1ba1e9f250339829ca3fc44cbb2929ba314421b24df4a2d3916a491bbf04e690612941502b412bd23c91a84c6995527a44aa5672bf20d9eb77a75b53bc4d0fc1e8", 0xc1}, {&(0x7f0000009b80)="8c9840dfc11518e5e846c5d864c9cd5a33d2128c529af392d4eb1bda44f9c3b15e37f2697542a2569c1b3530bb609d03efa463c91d431ed19223b7a5339a06", 0x3f}, {&(0x7f0000009bc0)="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", 0x1000}, {&(0x7f000000abc0)="797b414df78d0b55d66a2be5a1e32f10ef48f5716efad3068782dd8ec65e40de40aee97acf130c925287f35dbb392de4f09dc1aa487c6a3c1670e87dbd783122c9ff3f4c7402d5de318fe568", 0x4c}], 0x6, &(0x7f000000acc0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x4000}, 0x4000) r3 = add_key(&(0x7f000000ae00)='cifs.spnego\x00', &(0x7f000000ae40)={'syz', 0x0}, &(0x7f000000ae80)="f0d89ce6b3d040fada911a1bdcb0e86ef6959d7a11d9e5e9c3364ec6caa569c1375348e5a42b4f3ecb3665315639746615c3b7cf3b75b6822179767bbf2361f8cb83ab549717b397e33f4d7a3958f194d94c94b43cf011d8126236b73cec9e57a8f26ad52e015bf5230cbcc0fdb0e6fb4af7459c172cec4175987ef501c2ef8cdbed28f60f9a67", 0x87, 0xfffffffffffffff8) request_key(&(0x7f000000ad40)='id_legacy\x00', &(0x7f000000ad80)={'syz', 0x0}, &(0x7f000000adc0)='/dev/input/event#\x00', r3) getpeername$inet(r1, &(0x7f000000af40)={0x2, 0x0, @empty}, &(0x7f000000af80)=0x10) getsockopt$sock_int(r1, 0x1, 0x3b, &(0x7f000000afc0), &(0x7f000000b000)=0x4) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f000000b040)={'ipddp0\x00', 0x856}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f000000b080), &(0x7f000000b0c0)=0xc) getsockname$ax25(r1, &(0x7f000000b100)={{0x3, @rose}, [@remote, @bcast, @rose, @remote, @null, @null, @netrom]}, &(0x7f000000b180)=0x48) recvmmsg(r1, &(0x7f000000b600)=[{{&(0x7f000000b1c0)=@sco, 0x80, &(0x7f000000b540)=[{&(0x7f000000b240)=""/162, 0xa2}, {&(0x7f000000b300)=""/120, 0x78}, {&(0x7f000000b380)=""/192, 0xc0}, {&(0x7f000000b440)=""/235, 0xeb}], 0x4, &(0x7f000000b580)=""/73, 0x49}, 0xffff}], 0x1, 0x40000000, &(0x7f000000b640)={0x77359400}) write$cgroup_int(r1, &(0x7f000000b680)=0x9, 0x12) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f000000b6c0)={0xb3, 0x2, 0x0, {0x0, 0x989680}, 0x3f, 0x9}) getsockname(r1, &(0x7f000000b740)=@isdn, &(0x7f000000b7c0)=0x80) openat$smack_task_current(0xffffffffffffff9c, &(0x7f000000b800)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f000000b840), &(0x7f000000b880)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f000000b8c0)=0xe4d4, 0x4) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f000000b900)={0xb, 0x3, {0x51, 0x5793, 0x4, {0x5, 0x6b5}, {0x5, 0x5a}, @cond=[{0x2, 0x4, 0x5, 0x80000000, 0xc2f, 0x5}, {0xffffffff7fffffff, 0x2ade, 0x4d, 0xfffffffffffffe01, 0x7}]}, {0x57, 0x4, 0x5bce, {0x1, 0x9}, {0x5, 0x6}, @const={0x0, {0x10000, 0x400, 0x0, 0xa11a}}}}) bpf$MAP_CREATE(0x0, &(0x7f000000b980)={0x5, 0x7, 0x8001, 0xfff, 0xb, r1}, 0x2c) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f000000b9c0)={'broute\x00'}, &(0x7f000000ba40)=0x78) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f000000ba80)={0x8001}, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f000000bac0), &(0x7f000000bb00)=0xb) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f000000bd00)={0x3, &(0x7f000000bb40)=[{}, {}, {}]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f000000bd40)={'nat\x00', 0x2, [{}, {}]}, 0x48) [ 244.184457] team0: Port device team_slave_0 added [ 244.199638] team0: Port device team_slave_1 added [ 244.233908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.301017] device hsr_slave_0 entered promiscuous mode [ 244.338565] device hsr_slave_1 entered promiscuous mode [ 244.395679] IPVS: ftp: loaded support on port[0] = 21 [ 244.403000] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.414828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.425359] bridge0: port 1(bridge_slave_0) entered disabled state 14:13:51 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x400400) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x4, 0x5, 0x0, 0x5, 0x6, 0x100000001, 0x8}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000500)={0x0, 0xfffffffffffffffe}, &(0x7f0000000540)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000600)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000000c0)="bb497b7863853c6ca80a30a54a16c79e19aa7f288f6b6fa7e83bc6fa013748eb2035c4f09877b0d2070ea739fd581465bea714e5c006c809f358da78a0091eb7628732c26c50d918af9bab37371c2451e3c12d1b0fb8eb3107609140c170268a6a35d1c86239514943493d6754125d5de5c482b54e350b75", 0x78}, {&(0x7f0000000140)="90b5f39ba7bcde79dbe822292703c0aa1c1ce88d19c8b274f509f3cf91e16c097f941c830a2d8d5835c3dc11a8726e0574f07feb0e20b723f3f9cb3145af7d3f755bfb0cf0f3a5d15859bfbb2ea8bf953d919ef7beaaa60f3739b714205004f663ec31e37081b50ce162fe5cc0fbe983dfff5efd3f736bbb9fbb6cdf5f4ae65f4066b33449c5c96ff5337da989c37219ef2b3b2ba7b20ff7db454bb61a0ceabb55d1288fc2fa5fbc80c161df36433d4a4fb33ef01111856606448bbcfe4e", 0xbe}, {&(0x7f0000000200)="91a89ea315623ddb8f9da83202075fb9ccaa4136bb3a998aa8e51cc442d011b4c6967c2209749ee33cbdaead78de0b9e65d8e98a2033a1df22681f6f9aea887e", 0x40}, {&(0x7f0000000240)="114de8ae86e91a008ac78ccad4e9703a32ffdbd61d5b27823db2fc1f9577c8f5218599694e98133d109d57a66c07b693dc84a321c781bf52e377bd9662ec5f955f9e643ef5f9e8b4e45f2a22043fc96961041eb9160bdb02a8cb6e1b58d0c92bc1cd51f668e42e5a6aa13fdaff0cc0a25794a29f915f81218ae6f6ea27d36adabb575738aa6be699a7c79f3b", 0x8c}, {&(0x7f0000000300)="eee761da40d372750bab6456efbb98ed5b7ddb87e53254c348a33bf8001e180af3f63442d27c5123828dae049404371552caa88db86905ee0867df500b13b4da12ef5bd4bcfe8bf3276e62fbd06e04ab23fc8036b2fc10e451c5ce72755cca8d3496cc889d2d4eab6597e83fd90cd6adc40ac0e5233956d23b267d422385d7bc8c4ab862ce6e8db224f4e2a1046add07279db9329e426e343f32d85e3457b29b19d9e2b2b47807834444702f9767dc2d40fd11556b8401d208952cb425ea754abd7b24211a8d2b055e0f3e1dbbd8", 0xce}, {&(0x7f0000000400)="26407dfaa23835020568758a38415de2f3734147005bb3bf3cd6aabe6f1c90cbcfe5ecd7626e702994f8eb6adaa6bf79fa737a4b31759c2b4825071496ce7bbee28d32339a932da4b36bfa93815990ab0623eabe1fea69e498a8325bed50fb7b75ac4024357bade47d7631e394633454", 0x70}], 0x6, &(0x7f0000000580)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x3, 0x0, 0x7f, 0xffff, 0x3, 0x6, 0x5, r1}}, @init={0x18, 0x84, 0x0, {0xe0, 0x9f3, 0x2, 0x401}}], 0x78, 0x4}], 0x1, 0x40) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000640)={@rand_addr=0x3, @empty}, 0x8) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000680)={0x2, 0x1, 0x1, 0x4, 0x20, 0xffffffff}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x160, 0x33, 0x404, 0x70bd2c, 0x25dfdbfc, {0x3}, [@nested={0x14c, 0x7d, [@generic="1e185fb270451a2a808b72470b536037dcc30146493f7695d56f228752634a855279581953a34d45d385d7823168adf2530f174cd283b69d37cb7461", @typed={0x8, 0x4027, @ipv4=@empty}, @typed={0x8, 0x22, @uid=r2}, @generic="aa66bb906a3a56afa9e05279518472c7065a8311bb90ad6838c6a29d9067634890f156cc7bb0da193c378f4065bb766af4c95133a44822ccb0607d381cbe1a8a4fcd2a7950c7f47847dd8722c58bacebaee49b9b4c18fcfd88a4aa05d0784655ec8c602747c0e5a33a0a8b9e4c146d324134b6cc2072c7a073d0ab70d0c7a2a059098a09ed4b1337dfbe9e1a10621a4155976257dd348c2ae4f3f366ad7ea5df8bb62b2b5780547779c3a1f7b84339793f9b4a7839bfa82d20032fd05d1c41fce88274799b3ee5adc094c12d79c5bb9f1aae560d81a92f96f24df879c139fceeaf40f4df3130b6de3bff7679386326699f", @typed={0x8, 0xe, @u32=0xffffffff}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8001}, 0x85) fsetxattr$security_ima(r0, &(0x7f00000009c0)='security.ima\x00', &(0x7f0000000a00)=@v2={0x5, 0x3, 0x3, 0xab, 0xbc, "66d6a51fc9ee6c8c031fb3191d86405a70fece1e85c40dc75a90d00d28352d82979429d70052bdc0cc38d852ba14b54b3d127e43204c8c8ad36a6adb5f9f32bdb19f32b155e968586980eb41fa0aac8f4e6a9cf31cb3237288efea53a81a5fe68094838bf1362631cded5c3d5ee3b0328b4d931401b05b2724b9abc6de32da6d78d76eced73587468bc5fc021c16e17de8c7da9ed5c99bd268353c415f33dc52b23ee72e9ec7f0afc0cb419406a34c7e2d471a6a1426465b18fd65c9"}, 0xc6, 0x3) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000b00)={0x7, 0x8, [{0x3f, 0x0, 0xfffffffeffffffff}, {0x3, 0x0, 0xfff}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x5, 0x0, 0x4}, {0xef3b, 0x0, 0x1}, {0x4, 0x0, 0x7}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={0x0, r0, 0xb, 0x2}, 0x14) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000bc0)=']wlan0\x00') ioctl$RTC_WIE_OFF(r0, 0x7010) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000c00)=0x6, 0x4) fcntl$setstatus(r3, 0x4, 0x6400) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x1d, r4}, 0x10, &(0x7f0000000d80)={&(0x7f0000000d00)={0x7, 0x201, 0x4, {r5, r6/1000+10000}, {}, {0x2, 0xfffffffffffffeff, 0x7fffffff, 0xd4b9}, 0x1, @can={{0x4, 0xffffffff, 0x5, 0x7}, 0x8, 0x1, 0x0, 0x0, "cb105632f932e675"}}, 0x48}, 0x1, 0x0, 0x0, 0x855}, 0x40) r7 = syz_open_dev$sndpcmp(&(0x7f0000000e00)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1a7c42) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000e40)) sync() ioctl$TCSBRKP(r7, 0x5425, 0x1) setxattr$security_ima(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='security.ima\x00', &(0x7f0000000f00)=@ng={0x4, 0xf, "a4446c0e18852a7564dc5212d0e04df479e13487"}, 0x16, 0x2) r8 = accept4(r7, &(0x7f0000000f40)=@nl, &(0x7f0000000fc0)=0x80, 0x80800) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000001000)={0x5bb5f2da, "3d2a4a3c91426dfca096d0a84c6abaf79d890c6a3b05e9c23ff2cf0600517518", 0x7, 0x20, 0xffffffffffffff0a, 0x80, 0x4, 0x1, 0x1, 0x7}) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001080), &(0x7f00000010c0)=0xc) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000001100)=""/211, &(0x7f0000001200)=0xd3) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000001240)) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001280)=""/142) [ 244.443650] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.461096] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 244.501748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.515314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.523578] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.530002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.586252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.594723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.602962] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.609383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.623957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.633276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.672206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.680394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.695023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.707706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.727728] IPVS: ftp: loaded support on port[0] = 21 [ 244.744022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.753376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.764100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 14:13:52 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)) r1 = accept4(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x80, 0x800) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) r2 = open(&(0x7f0000000180)='./file0\x00', 0x800, 0x8a) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000001c0)=0x2) connect(r0, &(0x7f0000000200)=@l2={0x1f, 0x5, {0x400, 0x2, 0xce6b, 0x7, 0xa5a7, 0x2}, 0x4, 0xa8a9}, 0x80) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000300)=""/10, 0x102e000, 0x800, 0x59064723}, 0x18) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000380)={0xf, {0x800, 0x6, 0x1, 0x911}, {0xffffffffffff768d, 0x3, 0x8, 0x5}, {0x21, 0x7fffffff}}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000003c0)={'syzkaller0\x00', {0x2, 0x4e22, @local}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000400)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000480)={r3, 0xfff}, &(0x7f00000004c0)=0x8) recvfrom$ax25(r1, &(0x7f0000000500)=""/32, 0x20, 0x40, &(0x7f0000000540)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default]}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x200080, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000600)={0x7fff, {{0x2, 0x4e22, @local}}}, 0x88) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc, 0x4) syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000700)=r3, 0x4) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000007c0)={0x10, 0x30, &(0x7f0000000740)="4909e4875a27d68cbf7ba050796c5ac20f86fda2d8e65bc86301650cdebb9d3143c009268fdb9828ce2708b9d57a6824f3f324173dce53f4bc46b36f0f3528f27e273e1ec14a7228340b0970dcd6ba4d531f6f70c73a0b263f13b469c61c50", {0x7, 0x10000, 0x32314142, 0x1, 0x8, 0xff, 0xb, 0x80000001}}) ioctl$CAPI_INSTALLED(r2, 0x80024322) getsockopt$packet_int(r2, 0x107, 0x1b, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000880)={0x800, 0x3, 0x0, 0x4}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7509) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000008c0)={@rand_addr, @remote, 0x0}, &(0x7f0000000900)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000940)={'vcan0\x00', r4}) truncate(&(0x7f0000000980)='./file0\x00', 0x80000000) [ 244.772236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.782285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.790402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.798015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.822170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.831315] chnl_net:caif_netlink_parms(): no params data found [ 244.854446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.905687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.923949] IPVS: ftp: loaded support on port[0] = 21 14:13:52 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044306, &(0x7f0000000040)=0x45b7) [ 245.046725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.055815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.069554] 8021q: adding VLAN 0 to HW filter on device team0 14:13:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x3e, 0x0) clone(0x800002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$nbd(r0, &(0x7f0000000100)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11becfb1f8cd557b0bdfcd7f42f63af872a0a10e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406ffea21ad8514d024cacb80e3ba56"}, 0x68) [ 245.108877] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.115252] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.131171] device bridge_slave_0 entered promiscuous mode [ 245.143239] dlm: Unknown command passed to DLM device : 0 [ 245.143239] [ 245.150792] bridge0: port 2(bridge_slave_1) entered blocking state 14:13:52 executing program 0: getegid() ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)) setgroups(0x0, 0x0) [ 245.157150] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.177450] device bridge_slave_1 entered promiscuous mode [ 245.189532] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 245.211028] chnl_net:caif_netlink_parms(): no params data found [ 245.230058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.237934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.246007] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.252435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.262126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.270116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.277841] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.284254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.291598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.334383] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.345467] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.357009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.365311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.383233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.395055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.432407] hrtimer: interrupt took 26882 ns [ 245.446332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.457220] team0: Port device team_slave_0 added [ 245.464694] team0: Port device team_slave_1 added 14:13:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETSF(r1, 0x5437, 0x0) [ 245.565108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.582472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.590657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.598730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.650903] device hsr_slave_0 entered promiscuous mode [ 245.688458] device hsr_slave_1 entered promiscuous mode 14:13:53 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 245.746793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.755440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.771263] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.777627] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.789439] device bridge_slave_0 entered promiscuous mode [ 245.802475] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.829447] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.836583] device bridge_slave_1 entered promiscuous mode 14:13:53 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 245.863436] overlayfs: filesystem on './file0' not supported as upperdir [ 245.871961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.897832] chnl_net:caif_netlink_parms(): no params data found 14:13:53 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 246.117260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.181938] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.259480] chnl_net:caif_netlink_parms(): no params data found [ 246.305816] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.396249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.413999] team0: Port device team_slave_0 added [ 246.425736] team0: Port device team_slave_1 added 14:13:53 executing program 1: r0 = getegid() ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffff9c, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x30400, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) fcntl$getownex(r4, 0x10, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)) setgroups(0x4, &(0x7f0000000140)=[r0, r0, r0, 0x0]) [ 246.444801] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.464286] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.472380] device bridge_slave_0 entered promiscuous mode [ 246.506352] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.513837] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.529042] device bridge_slave_0 entered promiscuous mode [ 246.540863] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.547218] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.555000] device bridge_slave_1 entered promiscuous mode [ 246.571122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.578134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.587916] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.650663] device hsr_slave_0 entered promiscuous mode [ 246.688740] device hsr_slave_1 entered promiscuous mode [ 246.730622] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.737022] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.744369] device bridge_slave_1 entered promiscuous mode [ 246.775948] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.807258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.823200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.832456] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.838863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.852299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.864319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.876397] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.882895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.897640] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.907579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.929840] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.952207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.965953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.998779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.032679] team0: Port device team_slave_0 added [ 247.046249] team0: Port device team_slave_0 added [ 247.052461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.060986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.070624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.077643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.085936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.097179] team0: Port device team_slave_1 added [ 247.103713] team0: Port device team_slave_1 added [ 247.135320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.146748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.219828] device hsr_slave_0 entered promiscuous mode [ 247.278473] device hsr_slave_1 entered promiscuous mode [ 247.324985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.332616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.340423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.347843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.356443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.430295] device hsr_slave_0 entered promiscuous mode [ 247.478539] device hsr_slave_1 entered promiscuous mode [ 247.545103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.560589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.588084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.595627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.629479] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.670503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.680486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.690157] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.696519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.717118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.730794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.741506] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.747843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.755255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.791533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.797734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.805408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.826118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 14:13:55 executing program 2: r0 = socket(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xcf, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) splice(r0, &(0x7f0000000500), 0xffffffffffffffff, &(0x7f0000000600), 0x1, 0x8) splice(r1, &(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@sack_perm], 0x1) setitimer(0x1, &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x800010b, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) fcntl$getown(0xffffffffffffffff, 0x9) [ 247.837726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.852755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.867492] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.873754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.883292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.894070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.905402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.916262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.926788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.934642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.944966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.952913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.960333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.977116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.994866] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.022434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.032675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.045172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.055325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.065719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.077149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.087973] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.094412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.107519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.115620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.129235] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.135582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.147124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.213776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.226840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.251058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:13:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x800000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, 0x0}, 0x0) [ 248.273732] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.280212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.308789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.336726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.353415] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.359851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.377775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.386892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.402279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.413633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.424762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.435668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.446808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.457645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.472423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.482873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.493714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.513413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.542576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.558090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.572925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.584653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.595746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.606934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.617868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.629007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.636597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.651398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.665166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.690768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.705363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.776833] 8021q: adding VLAN 0 to HW filter on device batadv0 14:13:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000007200)=[{{&(0x7f0000000400)=@rc, 0x80, 0x0}}], 0x4000000000000d1, 0x20000000) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 14:13:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000180)="3666440f50f564ff0941c3c4218567dec4c27d794e003e360f71e004e3024578232736450fc764e80bc442019dccd3198b") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000), 0x4) 14:13:56 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="0fc3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x20000004005}) 14:13:56 executing program 2: r0 = socket(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xcf, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) splice(r0, &(0x7f0000000500), 0xffffffffffffffff, &(0x7f0000000600), 0x1, 0x8) splice(r1, &(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@sack_perm], 0x1) setitimer(0x1, &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x800010b, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) fcntl$getown(0xffffffffffffffff, 0x9) 14:13:56 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c30f0f441e04a4c4c27d794e0066420fe2e33e0f1110c442019dcc6f") accept4$packet(r1, 0x0, 0x0, 0x0) 14:13:56 executing program 1: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000940)={[], 0x1, 0x5, 0x0, 0x0, 0x80}) r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$TIOCSBRK(r1, 0x40044590) 14:13:56 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:57 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:57 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 14:13:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)) 14:13:57 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=0xffffffffffffff9c) 14:13:57 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) read$FUSE(r0, &(0x7f0000003080), 0x1000) 14:13:57 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0558acbde28474fa7c5a8dd30d44d28d6646028d831fd81eeb4ce4aaa9bcf4d2785936823e814a5aa3ba0411741642e8a3b214e729dc1f0fe78ae1b0debadf06649484f7ec57e4edbd8d8d212a26f15013db0ec54bdbc860ea0efbb8fa45c0fd21492de939c91aa32ae4273dfdaf81c1f16b2aa263ddb1f3a781a84ffc3004d78b02521a3cfb7aa1ed4f28780c7c62a4"], 0x90) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000003c0)={{0x1, 0x2, 0x1, 0x1, 0x9}, 0x1000, 0x4}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000280)={0x1, &(0x7f00000000c0), 0x4, r1, 0x7}) r3 = getpid() ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) sched_setattr(r3, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) rmdir(&(0x7f0000000180)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000001c0)=0xfffffffffffffffd) 14:13:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000100)=ANY=[]) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:13:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x6}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 14:13:58 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:58 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 250.872215] overlayfs: failed to resolve './file1': -2 14:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:13:58 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 251.113518] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 251.148106] overlayfs: failed to resolve './file1': -2 14:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 251.169031] FAT-fs (loop1): Filesystem has been set read-only 14:13:58 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:58 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) 14:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 251.493907] overlayfs: failed to resolve './file1': -2 14:13:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) signalfd4(r0, &(0x7f0000a71ff8), 0x8, 0x0) [ 251.518790] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 251.561489] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 251.594784] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) 14:13:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="afc3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:59 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) 14:13:59 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:13:59 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:13:59 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) memfd_create(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x288002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) 14:13:59 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) 14:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:13:59 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:13:59 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) 14:13:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x2006001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) read$eventfd(r0, &(0x7f0000000180), 0x8) 14:13:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x463) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:13:59 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:59 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 252.327502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 252.337882] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 252.366621] FAT-fs (loop1): Filesystem has been set read-only 14:13:59 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:13:59 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:59 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 252.384585] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 252.422398] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 14:13:59 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:13:59 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) [ 252.488485] protocol 88fb is buggy, dev hsr_slave_0 [ 252.493657] protocol 88fb is buggy, dev hsr_slave_1 [ 252.548290] protocol 88fb is buggy, dev hsr_slave_0 [ 252.553386] protocol 88fb is buggy, dev hsr_slave_1 14:14:00 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 252.783373] overlayfs: failed to resolve './file1': -2 [ 252.808138] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 252.809576] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 252.817395] FAT-fs (loop1): Filesystem has been set read-only 14:14:00 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x3e, 0x0) clone(0x800002102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$nbd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000000000000000000000120000a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fb9a1becfb1f8cd557b0bdfcd7f42f63af872a0a10e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406ffea21ad8514d024cacb80e3ba5650"], 0x1) [ 252.863559] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 14:14:00 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000100)={0x6000000, 0x0, 0x0, 0x0, 0x4, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11becfb1f8cd557b0bdfcd7f42f63af872a0a10e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406ffea21ad8514d024cacb80e3ba56"}, 0x68) 14:14:00 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)) 14:14:00 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:00 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffca88}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x368, &(0x7f0000000680), 0x1}, 0x0) 14:14:00 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 253.045900] overlayfs: failed to resolve './file1': -2 14:14:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)) [ 253.098591] dlm: no local IP address has been set 14:14:00 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:00 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 253.138384] dlm: cannot start dlm lowcomms -107 14:14:00 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x62102) r1 = dup(r0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x40141042, 0x0) ftruncate(r2, 0x27fff) sendfile(r1, r2, 0x0, 0x8000fffffffd) poll(0x0, 0x0, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setrlimit(0x0, 0x0) [ 253.215023] overlayfs: failed to resolve './file1': -2 14:14:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key(0x0, 0x0, &(0x7f0000000440)="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", 0xb46, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3b1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:14:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)) 14:14:00 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:00 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 253.336913] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 253.428364] FAT-fs (loop1): Filesystem has been set read-only 14:14:00 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 14:14:01 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 253.569311] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 253.608839] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 14:14:01 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 14:14:01 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:01 executing program 3: pipe(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)={r0, r1}) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) bind$netrom(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(r4, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) open_by_handle_at(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e007ea4ccdf094071a04f68fdf7f99ea03c5fbaa4f5c157462c4c817e3bb71556831aa6a12b6e867e33b6f70af6e23b7370d16601c719887b40de4a99bc0f70e3cf73545fe45fb9483e13859226754c24739fef7af52efb08a81b0e9df01d52bf1a98b815dd0bd16460503345e492b90165febf62b7140c1faf85425c6856237c130f5511d1ad6cc1a83fe496605cdc68b511d3cddf9f89852b099e4cb7fb7dc106e9627fee565406aeb814cba45ce8c3e548242ff00000000000000000000"], 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0) 14:14:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) [ 253.973576] print_req_error: I/O error, dev loop0, sector 0 flags 801 [ 253.980594] Buffer I/O error on dev loop0, logical block 0, lost async page write 14:14:01 executing program 2: getegid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x30400, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getownex(r3, 0x10, 0x0) 14:14:01 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 14:14:01 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:01 executing program 3: pipe(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)={r0, r1}) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) bind$netrom(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(r4, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) open_by_handle_at(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="6b000000090000001b154c4a95cdf9f27a31bc500b84fbd1e5db7d54ebb860d78ed165af03f1a342aed04d1ef994ca96b5c9d03e6da9c1e249e007ea4ccdf094071a04f68fdf7f99ea03c5fbaa4f5c157462c4c817e3bb71556831aa6a12b6e867e33b6f70af6e23b7370d16601c719887b40de4a99bc0f70e3cf73545fe45fb9483e13859226754c24739fef7af52efb08a81b0e9df01d52bf1a98b815dd0bd16460503345e492b90165febf62b7140c1faf85425c6856237c130f5511d1ad6cc1a83fe496605cdc68b511d3cddf9f89852b099e4cb7fb7dc106e9627fee565406aeb814cba45ce8c3e548242ff00000000000000000000"], 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0) 14:14:02 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 254.694449] print_req_error: I/O error, dev loop0, sector 0 flags 801 [ 254.701193] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 254.709281] print_req_error: I/O error, dev loop0, sector 4 flags 801 [ 254.715901] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 254.725467] print_req_error: I/O error, dev loop0, sector 8 flags 801 [ 254.732155] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 254.740115] print_req_error: I/O error, dev loop0, sector 12 flags 801 [ 254.746825] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 254.755643] print_req_error: I/O error, dev loop0, sector 16 flags 801 [ 254.762389] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 254.770359] print_req_error: I/O error, dev loop0, sector 20 flags 801 [ 254.777051] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 254.785036] print_req_error: I/O error, dev loop0, sector 24 flags 801 14:14:02 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:02 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) [ 254.791796] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 254.799552] print_req_error: I/O error, dev loop0, sector 28 flags 801 [ 254.806235] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 254.814126] print_req_error: I/O error, dev loop0, sector 32 flags 801 [ 254.820889] Buffer I/O error on dev loop0, logical block 8, lost async page write 14:14:02 executing program 3: pipe(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)={r0, r1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) bind$netrom(r1, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(r4, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x6, &(0x7f00000005c0)=[{0x9, 0x9, 0x7afd, 0x9}, {0x4, 0x1, 0x3, 0x80000001}, {0xfffffffffffffff9, 0x0, 0x64}, {0x0, 0x0, 0x0, 0xe44}, {0x8, 0x7, 0x3, 0x3}, {0x0, 0x5, 0x0, 0x9}]}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) creat(0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0) 14:14:02 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:02 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 14:14:02 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 14:14:03 executing program 2: getegid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x30400, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getownex(r3, 0x10, 0x0) 14:14:03 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:03 executing program 3: pipe(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)={r0, r1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) bind$netrom(r1, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(r4, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x6, &(0x7f00000005c0)=[{0x9, 0x9, 0x7afd, 0x9}, {0x4, 0x1, 0x3, 0x80000001}, {0xfffffffffffffff9, 0x0, 0x64}, {0x0, 0x0, 0x0, 0xe44}, {0x8, 0x7, 0x3, 0x3}, {0x0, 0x5, 0x0, 0x9}]}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) creat(0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0) 14:14:03 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 14:14:03 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 14:14:03 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 14:14:03 executing program 3: pipe(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)={r0, r1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) bind$netrom(r1, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(r4, &(0x7f0000000780)='security.SMICK64MMAP\x00\x90\b\xac\x18/\x9b*\xf8\xe3\\\x8f\xa9I\x1e\xb9\x01&Y&\xb1\x17A\x1b{mR7i6[\xc4\x9bz\xe4U#%><\xecK_.\xed\xac4\x8b\xfbN\x91\xb2\xa8\x00.\xa8U\xe53\xa8\x86\xb5\x00[*81\xcf,Xg{\x91\x04\xf7\x8a\xf5\xcb\xf5\b/l^\x9fm\xb7h\xea\x05[\xab\x839\x82\xe1>\r\xc8\xdb\x05\x9cw', &(0x7f0000000280)='IPVS\x00', 0x5, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x6, &(0x7f00000005c0)=[{0x9, 0x9, 0x7afd, 0x9}, {0x4, 0x1, 0x3, 0x80000001}, {0xfffffffffffffff9, 0x0, 0x64}, {0x0, 0x0, 0x0, 0xe44}, {0x8, 0x7, 0x3, 0x3}, {0x0, 0x5, 0x0, 0x9}]}, 0x10) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000580)={'TPROXY\x00'}, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) creat(0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x0) 14:14:03 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)) 14:14:03 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:03 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) 14:14:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:03 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 256.439853] audit: type=1326 audit(1551881643.894:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8259 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 14:14:04 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:04 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 256.643882] overlayfs: missing 'lowerdir' 14:14:04 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:04 executing program 3: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) fchmod(0xffffffffffffffff, 0x0) 14:14:04 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 256.773661] audit: type=1326 audit(1551881644.224:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 [ 256.812314] overlayfs: missing 'lowerdir' 14:14:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:04 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) [ 256.981830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 256.992375] overlayfs: missing 'lowerdir' [ 257.003740] FAT-fs (loop1): Filesystem has been set read-only [ 257.026198] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 14:14:04 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000100)) 14:14:04 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:04 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:04 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 257.208330] audit: type=1326 audit(1551881644.654:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8259 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 [ 257.310127] overlayfs: missing 'workdir' 14:14:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:04 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 257.340908] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 257.371142] FAT-fs (loop1): Filesystem has been set read-only [ 257.413778] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 257.464270] overlayfs: missing 'workdir' [ 257.568867] audit: type=1326 audit(1551881645.024:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 14:14:05 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) capset(0x0, 0x0) 14:14:05 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) geteuid() 14:14:05 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:05 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) [ 257.682792] audit: type=1326 audit(1551881645.134:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 [ 257.706693] overlayfs: missing 'workdir' 14:14:05 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:05 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) fremovexattr(0xffffffffffffffff, 0x0) [ 257.795135] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 257.832093] FAT-fs (loop1): Filesystem has been set read-only 14:14:05 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:05 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 257.890265] overlayfs: missing 'lowerdir' 14:14:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:05 executing program 3: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) 14:14:05 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 258.088458] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 258.120182] overlayfs: missing 'lowerdir' [ 258.133472] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 258.139232] FAT-fs (loop1): Filesystem has been set read-only 14:14:05 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x1c, 0x0, 0x204}, 0x2fc}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:14:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:05 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:05 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:05 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/81) 14:14:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 258.473590] audit: type=1326 audit(1551881645.924:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 14:14:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 258.582912] overlayfs: missing 'lowerdir' 14:14:06 executing program 3: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) setgid(0x0) 14:14:06 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) [ 258.619587] audit: type=1326 audit(1551881646.074:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 [ 258.644382] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 258.658425] FAT-fs (loop1): Filesystem has been set read-only 14:14:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 258.720578] audit: type=1326 audit(1551881646.154:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 14:14:06 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 258.841454] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 258.896081] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.947768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 258.961647] FAT-fs (loop1): Filesystem has been set read-only [ 259.397551] audit: type=1326 audit(1551881646.844:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 14:14:06 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) getsockname$packet(0xffffffffffffff9c, 0x0, 0x0) 14:14:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:06 executing program 5: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:06 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:06 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 259.497672] audit: type=1326 audit(1551881646.944:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 14:14:07 executing program 3: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5473, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prlimit64(0x0, 0x8, &(0x7f0000000540)={0x401, 0x10001}, &(0x7f0000000580)) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000640)={0x0, &(0x7f0000000600)}) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) [ 259.589886] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 259.609964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 14:14:07 executing program 5: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:07 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:07 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:07 executing program 3: uname(0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 14:14:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) [ 259.841891] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 259.922804] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 14:14:07 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:14:07 executing program 5: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:07 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:07 executing program 3: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) link(0x0, 0x0) 14:14:07 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:14:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:08 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:08 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 14:14:08 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:14:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:08 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:08 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:14:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:08 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:08 executing program 3: 14:14:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:08 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) setfsuid(0x0) 14:14:08 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:08 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x41e, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 14:14:09 executing program 0: 14:14:09 executing program 3: 14:14:09 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:09 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:09 executing program 3: 14:14:09 executing program 0: 14:14:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:09 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:09 executing program 0: 14:14:09 executing program 3: 14:14:10 executing program 2: 14:14:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:10 executing program 0: 14:14:10 executing program 3: 14:14:10 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:10 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:10 executing program 0: 14:14:10 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:10 executing program 3: 14:14:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:10 executing program 2: 14:14:10 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:10 executing program 0: 14:14:10 executing program 2: 14:14:10 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:10 executing program 3: 14:14:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:10 executing program 0: 14:14:10 executing program 2: 14:14:10 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:10 executing program 3: 14:14:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:10 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:10 executing program 0: 14:14:10 executing program 2: 14:14:10 executing program 3: 14:14:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:10 executing program 3: 14:14:10 executing program 2: 14:14:10 executing program 0: 14:14:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:11 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:11 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:11 executing program 2: 14:14:11 executing program 3: 14:14:11 executing program 0: 14:14:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:11 executing program 3: 14:14:11 executing program 0: 14:14:11 executing program 2: [ 263.842711] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 14:14:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) [ 263.883037] FAT-fs (loop1): Filesystem has been set read-only 14:14:11 executing program 0: 14:14:11 executing program 3: 14:14:11 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:11 executing program 2: 14:14:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:11 executing program 3: 14:14:11 executing program 0: 14:14:11 executing program 0: 14:14:11 executing program 2: 14:14:11 executing program 3: 14:14:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)) 14:14:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:11 executing program 3: [ 264.597674] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 264.616377] FAT-fs (loop1): Filesystem has been set read-only 14:14:12 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:12 executing program 0: 14:14:12 executing program 2: 14:14:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)) 14:14:12 executing program 3: 14:14:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:12 executing program 3: 14:14:12 executing program 0: 14:14:12 executing program 2: 14:14:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)) 14:14:12 executing program 2: 14:14:12 executing program 3: 14:14:12 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:12 executing program 0: 14:14:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:12 executing program 2: 14:14:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, 0x0) 14:14:12 executing program 3: 14:14:12 executing program 2: 14:14:12 executing program 3: 14:14:12 executing program 0: 14:14:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, 0x0) 14:14:12 executing program 2: 14:14:12 executing program 3: 14:14:13 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:13 executing program 0: 14:14:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, 0x0) 14:14:13 executing program 2: 14:14:13 executing program 3: 14:14:13 executing program 2: 14:14:13 executing program 0: 14:14:13 executing program 3: 14:14:13 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:13 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 266.097130] overlayfs: filesystem on './file0' not supported as upperdir 14:14:13 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 14:14:13 executing program 0: 14:14:13 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:13 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:13 executing program 0: 14:14:13 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:13 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:13 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:13 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:14 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:14 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:14 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:14 executing program 4: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:14 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001ae40000000000"], 0x9) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 14:14:14 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:14 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 266.823708] FAT-fs (loop1): bogus number of reserved sectors [ 266.846734] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:14 executing program 4: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:14 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:14 executing program 4: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:14 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)) 14:14:14 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:14 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) renameat(0xffffffffffffffff, &(0x7f0000000240)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00') [ 267.234115] FAT-fs (loop1): bogus number of reserved sectors [ 267.259263] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:14 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:15 executing program 0 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:15 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x2, &(0x7f0000000080)) 14:14:15 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:15 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) renameat(0xffffffffffffffff, &(0x7f0000000240)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00') 14:14:15 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:15 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5401, &(0x7f0000000080)) 14:14:15 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) renameat(0xffffffffffffffff, &(0x7f0000000240)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00') [ 267.884132] FAULT_INJECTION: forcing a failure. [ 267.884132] name failslab, interval 1, probability 0, space 0, times 1 [ 267.892460] FAT-fs (loop1): bogus number of reserved sectors [ 267.901345] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:15 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:15 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 268.019852] CPU: 0 PID: 8956 Comm: syz-executor.0 Not tainted 5.0.0+ #8 [ 268.026667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.036026] Call Trace: [ 268.038706] dump_stack+0x172/0x1f0 [ 268.042451] should_fail.cold+0xa/0x1b [ 268.046363] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 268.051511] ? lock_downgrade+0x810/0x810 [ 268.055744] ? ___might_sleep+0x163/0x280 [ 268.059938] __should_failslab+0x121/0x190 [ 268.064241] should_failslab+0x9/0x14 [ 268.068075] kmem_cache_alloc+0x2b2/0x6f0 [ 268.072246] ? kasan_check_write+0x14/0x20 [ 268.076528] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 268.081444] getname_flags+0xd6/0x5b0 [ 268.085266] getname+0x1a/0x20 [ 268.088495] do_sys_open+0x2c9/0x5d0 [ 268.092220] ? filp_open+0x80/0x80 [ 268.095796] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.100566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.105336] ? do_syscall_64+0x26/0x610 [ 268.109352] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.114727] ? do_syscall_64+0x26/0x610 14:14:15 executing program 0 (fault-call:4 fault-nth:1): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:15 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:15 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5402, &(0x7f0000000080)) 14:14:15 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 268.118710] __x64_sys_openat+0x9d/0x100 [ 268.122779] do_syscall_64+0x103/0x610 [ 268.126673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.131873] RIP: 0033:0x457f29 [ 268.131888] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.131909] RSP: 002b:00007f638c538c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.131923] RAX: ffffffffffffffda RBX: 00007f638c538c90 RCX: 0000000000457f29 [ 268.131935] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 268.131942] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 268.131948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f638c5396d4 [ 268.131968] R13: 00000000004c3ea9 R14: 00000000004d72a8 R15: 0000000000000003 [ 268.219621] FAT-fs (loop1): bogus number of reserved sectors [ 268.234262] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:15 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:15 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5404, &(0x7f0000000080)) 14:14:15 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 268.433861] FAULT_INJECTION: forcing a failure. [ 268.433861] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 268.445701] CPU: 0 PID: 8999 Comm: syz-executor.0 Not tainted 5.0.0+ #8 [ 268.452469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.461849] Call Trace: [ 268.464467] dump_stack+0x172/0x1f0 [ 268.468113] should_fail.cold+0xa/0x1b [ 268.472037] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 268.477276] should_fail_alloc_page+0x50/0x60 [ 268.481832] __alloc_pages_nodemask+0x1a1/0x710 [ 268.486513] ? __alloc_pages_slowpath+0x2900/0x2900 [ 268.491532] ? find_held_lock+0x35/0x130 [ 268.495631] cache_grow_begin+0x9c/0x8c0 [ 268.499743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.505345] ? check_preemption_disabled+0x48/0x290 [ 268.510376] kmem_cache_alloc+0x62d/0x6f0 [ 268.514547] ? kasan_check_write+0x14/0x20 [ 268.518791] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 268.523651] getname_flags+0xd6/0x5b0 [ 268.527476] getname+0x1a/0x20 [ 268.530687] do_sys_open+0x2c9/0x5d0 [ 268.534419] ? filp_open+0x80/0x80 [ 268.537969] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.542757] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.547514] ? do_syscall_64+0x26/0x610 [ 268.551559] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.556933] ? do_syscall_64+0x26/0x610 [ 268.560931] __x64_sys_openat+0x9d/0x100 [ 268.565031] do_syscall_64+0x103/0x610 [ 268.565053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.574116] RIP: 0033:0x457f29 14:14:16 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5405, &(0x7f0000000080)) [ 268.574132] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.574140] RSP: 002b:00007f638c538c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.603939] RAX: ffffffffffffffda RBX: 00007f638c538c90 RCX: 0000000000457f29 [ 268.611211] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 268.611221] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 268.611229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f638c5396d4 [ 268.611237] R13: 00000000004c3ea9 R14: 00000000004d72a8 R15: 0000000000000003 14:14:16 executing program 0 (fault-call:4 fault-nth:2): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:16 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:16 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, 0x0) 14:14:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5406, &(0x7f0000000080)) 14:14:16 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 268.781868] FAT-fs (loop1): bogus number of reserved sectors 14:14:16 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, 0x0) 14:14:16 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 268.823352] FAT-fs (loop1): Can't find a valid FAT filesystem [ 268.919737] FAULT_INJECTION: forcing a failure. [ 268.919737] name failslab, interval 1, probability 0, space 0, times 0 [ 268.964600] CPU: 0 PID: 9036 Comm: syz-executor.0 Not tainted 5.0.0+ #8 [ 268.971442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.980889] Call Trace: [ 268.983496] dump_stack+0x172/0x1f0 [ 268.987141] should_fail.cold+0xa/0x1b [ 268.991052] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 268.996168] ? lock_downgrade+0x810/0x810 [ 269.000328] ? ___might_sleep+0x163/0x280 [ 269.004493] __should_failslab+0x121/0x190 [ 269.008742] should_failslab+0x9/0x14 [ 269.012909] kmem_cache_alloc+0x2b2/0x6f0 [ 269.017150] ? unwind_get_return_address+0x61/0xa0 [ 269.022113] ? __save_stack_trace+0x8a/0xf0 [ 269.026451] __alloc_file+0x27/0x300 [ 269.030174] alloc_empty_file+0x72/0x170 [ 269.034248] path_openat+0xef/0x4690 [ 269.037994] ? __lock_acquire+0x53b/0x4700 [ 269.042251] ? getname_flags+0xd6/0x5b0 [ 269.046259] ? getname+0x1a/0x20 [ 269.049634] ? do_sys_open+0x2c9/0x5d0 [ 269.053525] ? __x64_sys_openat+0x9d/0x100 [ 269.057776] ? do_syscall_64+0x103/0x610 14:14:16 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5407, &(0x7f0000000080)) 14:14:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 269.061842] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.067240] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 269.067255] ? __lock_is_held+0xb6/0x140 [ 269.067279] do_filp_open+0x1a1/0x280 [ 269.079871] ? __alloc_fd+0x430/0x530 [ 269.083681] ? may_open_dev+0x100/0x100 [ 269.087694] ? lock_downgrade+0x810/0x810 [ 269.091853] ? kasan_check_read+0x11/0x20 [ 269.096023] ? do_raw_spin_unlock+0x57/0x270 [ 269.100453] do_sys_open+0x3fe/0x5d0 [ 269.104184] ? filp_open+0x80/0x80 [ 269.107732] ? trace_hardirqs_on_thunk+0x1a/0x1c 14:14:16 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 269.112501] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.117262] ? do_syscall_64+0x26/0x610 [ 269.121245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.126614] ? do_syscall_64+0x26/0x610 [ 269.126632] __x64_sys_openat+0x9d/0x100 [ 269.134691] do_syscall_64+0x103/0x610 [ 269.134710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.134724] RIP: 0033:0x457f29 [ 269.147049] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.165964] RSP: 002b:00007f638c538c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.173702] RAX: ffffffffffffffda RBX: 00007f638c538c90 RCX: 0000000000457f29 [ 269.181069] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 269.188339] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 269.195606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f638c5396d4 [ 269.195618] R13: 00000000004c3ea9 R14: 00000000004d72a8 R15: 0000000000000003 [ 269.246405] FAT-fs (loop1): bogus number of reserved sectors [ 269.278514] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:16 executing program 0 (fault-call:4 fault-nth:3): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5408, &(0x7f0000000080)) 14:14:16 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, 0x0) 14:14:16 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:16 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:16 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)) 14:14:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5409, &(0x7f0000000080)) [ 269.444463] FAT-fs (loop1): bogus number of reserved sectors 14:14:16 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:16 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 269.494391] FAT-fs (loop1): Can't find a valid FAT filesystem [ 269.509105] FAULT_INJECTION: forcing a failure. [ 269.509105] name failslab, interval 1, probability 0, space 0, times 0 [ 269.548563] CPU: 0 PID: 9081 Comm: syz-executor.0 Not tainted 5.0.0+ #8 [ 269.555351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.564719] Call Trace: [ 269.567361] dump_stack+0x172/0x1f0 [ 269.571033] should_fail.cold+0xa/0x1b [ 269.574948] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 269.577781] overlayfs: failed to resolve './file1': -2 [ 269.580089] ? lock_downgrade+0x810/0x810 [ 269.580110] ? ___might_sleep+0x163/0x280 [ 269.580128] __should_failslab+0x121/0x190 14:14:17 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:17 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 269.580148] should_failslab+0x9/0x14 [ 269.601749] kmem_cache_alloc+0x2b2/0x6f0 [ 269.605925] ? mark_held_locks+0x100/0x100 [ 269.610186] __d_alloc+0x2e/0x8c0 [ 269.613666] d_alloc+0x4d/0x2b0 [ 269.616950] ? find_held_lock+0x35/0x130 [ 269.621050] d_alloc_parallel+0xf4/0x1bc0 [ 269.625222] ? kasan_check_read+0x11/0x20 [ 269.629393] ? __d_lookup_rcu+0x6c0/0x6c0 [ 269.633562] ? __d_lookup+0x433/0x760 [ 269.637377] ? lookup_open+0x2c2/0x1b10 [ 269.641354] ? d_lookup+0xf9/0x260 [ 269.644901] ? lockdep_hardirqs_on+0x415/0x5d0 [ 269.649531] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 269.654563] ? d_lookup+0x19e/0x260 [ 269.658185] overlayfs: failed to resolve './file1': -2 [ 269.663468] lookup_open+0x52a/0x1b10 [ 269.663491] ? vfs_link+0xb60/0xb60 [ 269.663525] path_openat+0x1e95/0x4690 [ 269.674837] ? __lock_acquire+0x53b/0x4700 [ 269.679079] ? getname_flags+0xd6/0x5b0 [ 269.683090] ? getname+0x1a/0x20 [ 269.686514] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 269.691193] ? __lock_is_held+0xb6/0x140 [ 269.695279] do_filp_open+0x1a1/0x280 [ 269.699091] ? __alloc_fd+0x430/0x530 [ 269.702898] ? may_open_dev+0x100/0x100 [ 269.706893] ? kasan_check_read+0x11/0x20 [ 269.711050] ? do_raw_spin_unlock+0x57/0x270 [ 269.715489] do_sys_open+0x3fe/0x5d0 [ 269.719215] ? filp_open+0x80/0x80 [ 269.722764] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.727524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.732314] ? do_syscall_64+0x26/0x610 [ 269.736304] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.741673] ? do_syscall_64+0x26/0x610 [ 269.745659] __x64_sys_openat+0x9d/0x100 [ 269.749767] do_syscall_64+0x103/0x610 [ 269.753673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.758862] RIP: 0033:0x457f29 [ 269.758876] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.758884] RSP: 002b:00007f638c538c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.758898] RAX: ffffffffffffffda RBX: 00007f638c538c90 RCX: 0000000000457f29 14:14:17 executing program 0 (fault-call:4 fault-nth:4): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:17 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:17 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x540b, &(0x7f0000000080)) 14:14:17 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)) 14:14:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 269.758910] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 269.803325] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 269.810598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f638c5396d4 [ 269.817869] R13: 00000000004c3ea9 R14: 00000000004d72a8 R15: 0000000000000003 [ 269.905623] overlayfs: failed to resolve './file1': -2 [ 269.931186] FAT-fs (loop1): bogus number of reserved sectors 14:14:17 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:17 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)) 14:14:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x540c, &(0x7f0000000080)) [ 269.951121] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:17 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, 0x0, 0x0) 14:14:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 270.057121] FAULT_INJECTION: forcing a failure. [ 270.057121] name failslab, interval 1, probability 0, space 0, times 0 14:14:17 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) [ 270.138165] CPU: 0 PID: 9122 Comm: syz-executor.0 Not tainted 5.0.0+ #8 [ 270.144973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.154343] Call Trace: [ 270.156950] dump_stack+0x172/0x1f0 [ 270.160606] should_fail.cold+0xa/0x1b [ 270.164513] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 270.169632] ? lock_downgrade+0x810/0x810 [ 270.173794] ? ___might_sleep+0x163/0x280 [ 270.177957] __should_failslab+0x121/0x190 [ 270.182211] should_failslab+0x9/0x14 [ 270.186032] __kmalloc+0x2dc/0x740 [ 270.189654] ? ovl_lookup_single+0x880/0x880 [ 270.194122] ? selinux_is_enabled+0x43/0x60 [ 270.198459] ? kasan_check_write+0x14/0x20 [ 270.202699] ? ovl_lookup+0xc02/0x1a10 [ 270.206598] ovl_lookup+0xc02/0x1a10 [ 270.210335] ? ovl_path_next+0x2e0/0x2e0 [ 270.214414] ? kasan_check_read+0x11/0x20 [ 270.218570] ? __d_lookup_rcu+0x640/0x6c0 [ 270.222724] ? __d_lookup+0x433/0x760 [ 270.226534] ? lookup_open+0x2c2/0x1b10 [ 270.230520] ? d_lookup+0xf9/0x260 [ 270.234078] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 270.239105] ? d_lookup+0x19e/0x260 [ 270.242764] ? ovl_path_next+0x2e0/0x2e0 [ 270.246831] lookup_open+0x6d4/0x1b10 [ 270.246858] ? vfs_link+0xb60/0xb60 [ 270.246897] path_openat+0x1e95/0x4690 [ 270.254302] ? __lock_acquire+0x53b/0x4700 [ 270.254318] ? getname_flags+0xd6/0x5b0 [ 270.254332] ? getname+0x1a/0x20 [ 270.254360] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 270.274447] ? __lock_is_held+0xb6/0x140 [ 270.278535] do_filp_open+0x1a1/0x280 [ 270.282344] ? __alloc_fd+0x430/0x530 [ 270.286155] ? may_open_dev+0x100/0x100 [ 270.290152] ? kasan_check_read+0x11/0x20 [ 270.294316] ? do_raw_spin_unlock+0x57/0x270 [ 270.298775] do_sys_open+0x3fe/0x5d0 [ 270.302518] ? filp_open+0x80/0x80 [ 270.306088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 270.310852] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 270.315616] ? do_syscall_64+0x26/0x610 [ 270.319604] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.324975] ? do_syscall_64+0x26/0x610 [ 270.328991] __x64_sys_openat+0x9d/0x100 [ 270.333077] do_syscall_64+0x103/0x610 [ 270.336991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.342190] RIP: 0033:0x457f29 [ 270.345424] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.364332] RSP: 002b:00007f638c538c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.372032] RAX: ffffffffffffffda RBX: 00007f638c538c90 RCX: 0000000000457f29 [ 270.379293] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c 14:14:17 executing program 0 (fault-call:4 fault-nth:5): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x540d, &(0x7f0000000080)) 14:14:17 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, 0x0, 0x0) 14:14:17 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:17 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 270.386575] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.393833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f638c5396d4 [ 270.401101] R13: 00000000004c3ea9 R14: 00000000004d72a8 R15: 0000000000000003 [ 270.418921] FAT-fs (loop1): bogus number of reserved sectors [ 270.424888] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:18 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, 0x0, 0x0) 14:14:18 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 270.615864] FAULT_INJECTION: forcing a failure. [ 270.615864] name failslab, interval 1, probability 0, space 0, times 0 [ 270.659235] CPU: 1 PID: 9160 Comm: syz-executor.0 Not tainted 5.0.0+ #8 [ 270.666026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.675386] Call Trace: [ 270.678009] dump_stack+0x172/0x1f0 [ 270.681650] should_fail.cold+0xa/0x1b [ 270.685543] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 270.690649] ? lock_downgrade+0x810/0x810 [ 270.694807] ? ___might_sleep+0x163/0x280 [ 270.698968] __should_failslab+0x121/0x190 [ 270.703214] should_failslab+0x9/0x14 [ 270.707043] kmem_cache_alloc_trace+0x2d1/0x760 [ 270.711738] ? __lock_is_held+0xb6/0x140 [ 270.715798] ? check_preemption_disabled+0x48/0x290 [ 270.720890] ovl_encode_real_fh+0xc6/0x4c0 [ 270.725140] ? ovl_set_attr+0x280/0x280 [ 270.729147] ? preempt_count_add+0xbc/0x1b0 [ 270.733484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.739055] ? __mnt_want_write+0x1f1/0x2f0 [ 270.743391] ovl_set_origin+0x67/0x130 [ 270.747280] ovl_lookup+0x1511/0x1a10 [ 270.751121] ? ovl_path_next+0x2e0/0x2e0 [ 270.755196] ? __d_lookup_rcu+0x640/0x6c0 [ 270.759343] ? __d_lookup+0x433/0x760 [ 270.763142] ? lookup_open+0x2c2/0x1b10 [ 270.767112] ? d_lookup+0xf9/0x260 [ 270.770650] ? lockdep_hardirqs_on+0x415/0x5d0 [ 270.775237] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 270.780271] ? d_lookup+0x19e/0x260 [ 270.783914] ? ovl_path_next+0x2e0/0x2e0 [ 270.787994] lookup_open+0x6d4/0x1b10 [ 270.791810] ? vfs_link+0xb60/0xb60 [ 270.795463] path_openat+0x1e95/0x4690 [ 270.799347] ? __lock_acquire+0x53b/0x4700 [ 270.803582] ? getname_flags+0xd6/0x5b0 [ 270.807553] ? getname+0x1a/0x20 [ 270.810934] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 270.815601] ? __lock_is_held+0xb6/0x140 [ 270.819675] do_filp_open+0x1a1/0x280 [ 270.823479] ? __alloc_fd+0x430/0x530 [ 270.827285] ? may_open_dev+0x100/0x100 [ 270.831274] ? kasan_check_read+0x11/0x20 [ 270.835421] ? do_raw_spin_unlock+0x57/0x270 [ 270.839849] do_sys_open+0x3fe/0x5d0 [ 270.843568] ? filp_open+0x80/0x80 [ 270.847115] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 270.851874] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 270.856642] ? do_syscall_64+0x26/0x610 [ 270.860620] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.865992] ? do_syscall_64+0x26/0x610 [ 270.870025] __x64_sys_openat+0x9d/0x100 [ 270.874105] do_syscall_64+0x103/0x610 [ 270.878122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.883323] RIP: 0033:0x457f29 [ 270.886532] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:14:18 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x2, &(0x7f0000000000)={0x200000}) [ 270.905437] RSP: 002b:00007f638c538c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.913143] RAX: ffffffffffffffda RBX: 00007f638c538c90 RCX: 0000000000457f29 [ 270.920406] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 270.927674] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.934951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f638c5396d4 [ 270.942284] R13: 00000000004c3ea9 R14: 00000000004d72a8 R15: 0000000000000003 14:14:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x540e, &(0x7f0000000080)) 14:14:18 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000), 0x0) [ 270.960409] FAT-fs (loop1): bogus number of reserved sectors [ 270.966266] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:18 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x5421, &(0x7f0000000000)={0x200000}) 14:14:18 executing program 0 (fault-call:4 fault-nth:6): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x540f, &(0x7f0000000080)) 14:14:18 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000), 0x0) 14:14:18 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:18 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x5450, &(0x7f0000000000)={0x200000}) 14:14:18 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000), 0x0) [ 271.250256] FAT-fs (loop1): bogus number of reserved sectors [ 271.256201] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5410, &(0x7f0000000080)) 14:14:18 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 14:14:18 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x5451, &(0x7f0000000000)={0x200000}) 14:14:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:18 executing program 5 (fault-call:5 fault-nth:0): r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:19 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 271.572444] FAULT_INJECTION: forcing a failure. [ 271.572444] name failslab, interval 1, probability 0, space 0, times 0 [ 271.588820] FAT-fs (loop1): bogus number of reserved sectors [ 271.606555] FAT-fs (loop1): Can't find a valid FAT filesystem [ 271.618741] CPU: 0 PID: 9224 Comm: syz-executor.5 Not tainted 5.0.0+ #8 [ 271.625619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.634974] Call Trace: [ 271.637612] dump_stack+0x172/0x1f0 [ 271.641291] should_fail.cold+0xa/0x1b [ 271.645197] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 271.650312] ? lock_downgrade+0x810/0x810 [ 271.654469] ? ___might_sleep+0x163/0x280 [ 271.658624] __should_failslab+0x121/0x190 [ 271.658647] should_failslab+0x9/0x14 [ 271.658663] kmem_cache_alloc_node_trace+0x270/0x720 [ 271.658764] __get_vm_area_node+0x12b/0x3a0 [ 271.676137] __vmalloc_node_range+0xd4/0x790 [ 271.680639] ? snd_seq_pool_init+0x8b/0x320 [ 271.684973] ? __lock_acquire+0x53b/0x4700 [ 271.689238] ? snd_seq_pool_init+0x8b/0x320 [ 271.693569] vmalloc+0x6b/0x90 [ 271.696763] ? snd_seq_pool_init+0x8b/0x320 [ 271.701093] snd_seq_pool_init+0x8b/0x320 [ 271.705283] snd_seq_write+0x61a/0x6e0 [ 271.709221] ? snd_seq_client_enqueue_event+0x4c0/0x4c0 [ 271.714610] ? find_held_lock+0x35/0x130 [ 271.718678] ? __fget+0x340/0x540 [ 271.722166] __vfs_write+0x116/0x8e0 [ 271.725887] ? lock_downgrade+0x810/0x810 [ 271.730045] ? snd_seq_client_enqueue_event+0x4c0/0x4c0 [ 271.735427] ? kernel_read+0x120/0x120 [ 271.739331] ? __fget+0x367/0x540 [ 271.742797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.748437] ? security_file_permission+0x94/0x320 [ 271.753398] ? rw_verify_area+0x118/0x360 [ 271.757562] vfs_write+0x20c/0x580 [ 271.761120] ksys_write+0xea/0x1f0 [ 271.764699] ? __ia32_sys_read+0xb0/0xb0 [ 271.768782] ? do_syscall_64+0x26/0x610 [ 271.772767] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.778159] ? do_syscall_64+0x26/0x610 [ 271.782143] __x64_sys_write+0x73/0xb0 [ 271.786064] do_syscall_64+0x103/0x610 [ 271.789961] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.795178] RIP: 0033:0x457f29 [ 271.798483] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:14:19 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:19 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x5452, &(0x7f0000000000)={0x200000}) 14:14:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:19 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x5460, &(0x7f0000000000)={0x200000}) 14:14:19 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) [ 271.817392] RSP: 002b:00007f7b876d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.825113] RAX: ffffffffffffffda RBX: 00007f7b876d2c90 RCX: 0000000000457f29 [ 271.832389] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003 [ 271.839663] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 271.846969] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b876d36d4 [ 271.854754] R13: 00000000004c74d7 R14: 00000000004dd0e0 R15: 0000000000000005 14:14:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5412, &(0x7f0000000080)) 14:14:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 271.868727] syz-executor.5: vmalloc: allocation failure: 24000 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 271.987167] CPU: 1 PID: 9224 Comm: syz-executor.5 Not tainted 5.0.0+ #8 [ 271.993965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.003334] Call Trace: [ 272.005938] dump_stack+0x172/0x1f0 [ 272.009579] warn_alloc.cold+0x87/0x17f [ 272.013567] ? zone_watermark_ok_safe+0x260/0x260 [ 272.018493] ? rcu_read_lock_sched_held+0x110/0x130 [ 272.023560] ? __get_vm_area_node+0x2df/0x3a0 [ 272.028104] __vmalloc_node_range+0x48a/0x790 [ 272.032611] ? __lock_acquire+0x53b/0x4700 [ 272.036863] ? snd_seq_pool_init+0x8b/0x320 [ 272.041204] vmalloc+0x6b/0x90 [ 272.044419] ? snd_seq_pool_init+0x8b/0x320 [ 272.048769] snd_seq_pool_init+0x8b/0x320 [ 272.052954] snd_seq_write+0x61a/0x6e0 [ 272.056870] ? snd_seq_client_enqueue_event+0x4c0/0x4c0 [ 272.062263] ? find_held_lock+0x35/0x130 [ 272.066339] ? __fget+0x340/0x540 [ 272.069828] __vfs_write+0x116/0x8e0 [ 272.073545] ? lock_downgrade+0x810/0x810 [ 272.077710] ? snd_seq_client_enqueue_event+0x4c0/0x4c0 [ 272.083091] ? kernel_read+0x120/0x120 14:14:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5413, &(0x7f0000000080)) [ 272.087008] ? __fget+0x367/0x540 [ 272.090479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.096063] ? security_file_permission+0x94/0x320 [ 272.101055] ? rw_verify_area+0x118/0x360 [ 272.105218] vfs_write+0x20c/0x580 [ 272.108777] ksys_write+0xea/0x1f0 [ 272.112345] ? __ia32_sys_read+0xb0/0xb0 [ 272.116419] ? do_syscall_64+0x26/0x610 [ 272.120410] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.125786] ? do_syscall_64+0x26/0x610 [ 272.129771] __x64_sys_write+0x73/0xb0 [ 272.133662] do_syscall_64+0x103/0x610 14:14:19 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 272.137561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.142764] RIP: 0033:0x457f29 [ 272.145955] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.164890] RSP: 002b:00007f7b876d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.172606] RAX: ffffffffffffffda RBX: 00007f7b876d2c90 RCX: 0000000000457f29 [ 272.179883] RDX: 00000000ffffff76 RSI: 0000000020000000 RDI: 0000000000000003 14:14:19 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x40049409, &(0x7f0000000000)={0x200000}) [ 272.187151] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 272.194422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b876d36d4 [ 272.201696] R13: 00000000004c74d7 R14: 00000000004dd0e0 R15: 0000000000000005 [ 272.202093] overlayfs: filesystem on './file0' not supported as upperdir [ 272.216062] Mem-Info: [ 272.218910] active_anon:127729 inactive_anon:183 isolated_anon:0 [ 272.218910] active_file:7633 inactive_file:36853 isolated_file:0 [ 272.218910] unevictable:0 dirty:59 writeback:0 unstable:0 [ 272.218910] slab_reclaimable:13441 slab_unreclaimable:109919 [ 272.218910] mapped:58495 shmem:244 pagetables:1022 bounce:0 [ 272.218910] free:1234666 free_pcp:438 free_cma:0 [ 272.262580] FAT-fs (loop1): bogus number of reserved sectors [ 272.293773] FAT-fs (loop1): Can't find a valid FAT filesystem [ 272.323496] overlayfs: failed to resolve './file1': -2 [ 272.347230] Node 0 active_anon:513360kB inactive_anon:1032kB active_file:30388kB inactive_file:147512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:234180kB dirty:132kB writeback:0kB shmem:1276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 356352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 272.376344] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 272.413110] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.466587] lowmem_reserve[]: 0 2553 2555 2555 [ 272.481825] Node 0 DMA32 free:1141524kB min:36232kB low:45288kB high:54344kB active_anon:506740kB inactive_anon:772kB active_file:30392kB inactive_file:147448kB unevictable:0kB writepending:68kB present:3129332kB managed:2617972kB mlocked:0kB kernel_stack:7104kB pagetables:3932kB bounce:0kB free_pcp:2608kB local_pcp:1288kB free_cma:0kB [ 272.514686] lowmem_reserve[]: 0 0 2 2 [ 272.518691] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.518728] lowmem_reserve[]: 0 0 0 0 [ 272.554179] Node 1 Normal free:3785252kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.582054] lowmem_reserve[]: 0 0 0 0 [ 272.585847] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 272.599675] Node 0 DMA32: 9236*4kB (UME) 972*8kB (UME) 456*16kB (UME) 265*32kB (UME) 84*64kB (UM) 13*128kB (UM) 9*256kB (UME) 10*512kB (UM) 4*1024kB (UME) 3*2048kB (M) 258*4096kB (M) = 1141968kB [ 272.617262] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 272.628360] Node 1 Normal: 67*4kB (UM) 275*8kB (UM) 252*16kB (UME) 56*32kB (U) 9*64kB (UM) 9*128kB (UE) 9*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 919*4096kB (M) = 3785252kB [ 272.645179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.654060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 14:14:20 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5414, &(0x7f0000000080)) 14:14:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x3, 0x0) 14:14:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x200000}) 14:14:20 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 272.662702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.671566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 272.681063] 44747 total pagecache pages [ 272.685039] 0 pages in swap cache [ 272.688581] Swap cache stats: add 0, delete 0, find 0/0 [ 272.693941] Free swap = 0kB [ 272.696940] Total swap = 0kB [ 272.700045] 1965979 pages RAM [ 272.703183] 0 pages HighMem/MovableOnly [ 272.707142] 339412 pages reserved [ 272.710840] 0 pages cma reserved 14:14:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x4020940d, &(0x7f0000000000)={0x200000}) [ 272.775348] FAT-fs (loop1): bogus number of reserved sectors [ 272.797640] overlayfs: failed to resolve './file1': -2 [ 272.809251] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5415, &(0x7f0000000080)) [ 272.837117] overlayfs: filesystem on './file0' not supported as upperdir 14:14:20 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:20 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4, 0x0) 14:14:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x80024321, &(0x7f0000000000)={0x200000}) 14:14:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5416, &(0x7f0000000080)) [ 273.033663] overlayfs: failed to resolve './file1': -2 14:14:20 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 273.091012] FAT-fs (loop1): bogus number of reserved sectors 14:14:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x80024322, &(0x7f0000000000)={0x200000}) 14:14:20 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 273.133353] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x80044323, &(0x7f0000000000)={0x200000}) 14:14:20 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5418, &(0x7f0000000080)) [ 273.263704] overlayfs: filesystem on './file0' not supported as upperdir 14:14:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x6, 0x0) 14:14:20 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5419, &(0x7f0000000080)) [ 273.405366] FAT-fs (loop1): bogus number of reserved sectors [ 273.423418] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:20 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x80044324, &(0x7f0000000000)={0x200000}) 14:14:21 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:21 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:21 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x80044325, &(0x7f0000000000)={0x200000}) 14:14:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x541a, &(0x7f0000000080)) [ 273.659884] overlayfs: filesystem on './file0' not supported as upperdir [ 273.686364] FAT-fs (loop1): bogus number of reserved sectors 14:14:21 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x7, 0x0) 14:14:21 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x80044326, &(0x7f0000000000)={0x200000}) [ 273.775377] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:21 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:21 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x541b, &(0x7f0000000080)) 14:14:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:21 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:21 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x80044327, &(0x7f0000000000)={0x200000}) 14:14:21 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 274.070481] overlayfs: filesystem on './file0' not supported as upperdir 14:14:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x541d, &(0x7f0000000080)) 14:14:21 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x541e, &(0x7f0000000080)) [ 274.186573] FAT-fs (loop1): invalid media value (0x00) 14:14:21 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:21 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044306, &(0x7f0000000000)={0x200000}) 14:14:21 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc, 0x0) [ 274.232399] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:21 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0045878, &(0x7f0000000000)={0x200000}) 14:14:21 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:21 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 274.435594] overlayfs: filesystem on './file0' not supported as upperdir 14:14:21 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xd, 0x0) 14:14:22 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0045878, &(0x7f0000000000)={0x200000}) 14:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x541f, &(0x7f0000000080)) 14:14:22 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 274.524464] FAT-fs (loop1): invalid media value (0x00) [ 274.533358] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:22 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:22 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0104307, &(0x7f0000000000)={0x200000}) 14:14:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:22 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5420, &(0x7f0000000080)) 14:14:22 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 274.825446] overlayfs: filesystem on './file0' not supported as upperdir [ 274.853217] FAT-fs (loop1): invalid media value (0x00) 14:14:22 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x12, 0x0) [ 274.882723] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:22 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0104320, &(0x7f0000000000)={0x200000}) 14:14:22 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5421, &(0x7f0000000080)) 14:14:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:22 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0xbf, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 275.060025] kcapi: manufacturer command 2097152 unknown. [ 275.104101] overlayfs: missing 'lowerdir' 14:14:22 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:22 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0189436, &(0x7f0000000000)={0x200000}) [ 275.131608] FAT-fs (loop1): invalid media value (0x00) [ 275.140285] overlayfs: filesystem on './file0' not supported as upperdir [ 275.166191] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:22 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1f4, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5422, &(0x7f0000000080)) 14:14:22 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc0, 0x0) [ 275.252998] overlayfs: missing 'lowerdir' 14:14:22 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x500, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:22 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:22 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc020660b, &(0x7f0000000000)={0x200000}) 14:14:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5423, &(0x7f0000000080)) [ 275.467325] overlayfs: missing 'lowerdir' 14:14:23 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0404309, &(0x7f0000000000)={0x200000}) [ 275.533475] FAT-fs (loop1): invalid media value (0x00) [ 275.552558] overlayfs: filesystem on './file0' not supported as upperdir [ 275.569905] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:23 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5424, &(0x7f0000000080)) 14:14:23 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x600, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:23 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xf0, 0x0) 14:14:23 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x80ffff}) [ 275.683023] overlayfs: missing 'lowerdir' 14:14:23 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:23 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:23 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e00, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:23 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x300, 0x0) 14:14:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5425, &(0x7f0000000080)) 14:14:23 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x9, 0x30040) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x93508d9, 0x82000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x4, 0x4}}, 0x14) sendto$rxrpc(r1, &(0x7f0000000100)="cb82f738c755f775f87a6a5d75ae38d164c8e3aed4911b53737e65545f00eaa4b4601e51be394ebd2ff32ac29f009599db3e90c5ed07f018b0651f765a5b447bf0b57d660d4491f162064d21e2dee43ebcbb84f66423711992bf278fb5bfec640ed78668109be28770f8085eabc787e66cc1644e9303851af548aacb20ab25385237597c1c52be35b150e35d107fac6eec12f0a0e4df5f46c2c2f3e11f38317bc1a85c68c976d434c5c4faf0b4f3d7ecfd07306bdf0ddec7f864b7887fcdaf7dd4421e955dfcf774f2aec7331fe6ce69b8eeb34c2dd2b9bc9391c1ef89670d282cfa456bb292817a7b753980", 0xec, 0x14, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x9, 0x100000000000000, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @in={0x2, 0x4e24, @local}}}, 0x90) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0xc4, 0x1, 0x100000000, 0x0, 0x0, 0x8, 0x1, 0xb, 0x6, 0x6, 0xffff, 0xfffffffffffffffd, 0x7, 0x7, 0x49, 0x8, 0xa4, 0x3, 0xffff, 0x5, 0x3, 0x6, 0x200, 0x9, 0x7, 0x7fff, 0x100000000, 0x1, 0x8, 0xeb, 0x2, 0x400, 0x4, 0x3, 0xfff, 0x7, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x1f}, 0x800, 0xff, 0x10000, 0x6, 0x8, 0x8, 0x80000001}, r3, 0x1, r1, 0x8) r4 = getpgid(0xffffffffffffffff) setpriority(0x1, r4, 0x9) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:23 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1f00, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 276.030925] overlayfs: missing 'lowerdir' [ 276.043355] FAT-fs (loop1): invalid media value (0x00) [ 276.062329] overlayfs: filesystem on './file0' not supported as upperdir 14:14:23 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 276.088594] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:23 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x600, 0x0) 14:14:23 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x2000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:23 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&0xa\x00\x00\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0xc0044308, &(0x7f0000000000)={0x200000}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x2000) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000280)=""/244, 0xf4) [ 276.250268] overlayfs: missing 'lowerdir' 14:14:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5427, &(0x7f0000000080)) 14:14:23 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 276.319119] FAT-fs (loop1): invalid media value (0x00) [ 276.328299] FAT-fs (loop1): Can't find a valid FAT filesystem [ 276.350760] overlayfs: filesystem on './file0' not supported as upperdir 14:14:23 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x2100, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5428, &(0x7f0000000080)) 14:14:23 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:23 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x700, 0x0) [ 276.491044] overlayfs: missing 'lowerdir' 14:14:24 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:24 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x40400, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000000c0)=0x9, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x108, 0x4344, 0x9, 0x9, 0x81}, 0x10) 14:14:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 276.581291] FAT-fs (loop1): invalid media value (0x00) [ 276.595518] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5429, &(0x7f0000000080)) 14:14:24 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x2200, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 276.666529] INFO: trying to register non-static key. [ 276.671653] the code is fine but needs lockdep annotation. [ 276.677287] turning off the locking correctness validator. [ 276.682917] CPU: 0 PID: 9666 Comm: syz-executor.4 Not tainted 5.0.0+ #8 [ 276.689659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.698996] Call Trace: [ 276.701578] dump_stack+0x172/0x1f0 [ 276.705201] register_lock_class+0x1bdc/0x1bf0 [ 276.709764] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 276.714809] ? bpf_prog_kallsyms_find+0x50/0x2c0 [ 276.719548] ? check_noncircular+0x20/0x20 [ 276.723776] ? is_bpf_text_address+0xd3/0x170 [ 276.728270] ? kernel_text_address+0x73/0xf0 [ 276.732659] __lock_acquire+0x11f/0x4700 [ 276.736722] ? check_noncircular+0x20/0x20 [ 276.740944] ? mark_held_locks+0x100/0x100 [ 276.745158] ? __lock_acquire+0x53b/0x4700 [ 276.749369] ? __lock_acquire+0x53b/0x4700 [ 276.753581] ? __lock_acquire+0x53b/0x4700 [ 276.757794] lock_acquire+0x16f/0x3f0 [ 276.761597] ? __flush_work+0x61a/0x840 [ 276.765553] __flush_work+0x640/0x840 [ 276.769330] ? __flush_work+0x61a/0x840 [ 276.773316] ? try_wait_for_completion+0x9a/0xd0 [ 276.778052] ? insert_work+0x3a0/0x3a0 [ 276.781915] ? mark_held_locks+0xb1/0x100 [ 276.786041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.791582] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 276.797026] ? refcount_inc_checked+0x70/0x70 [ 276.801543] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 276.807103] ? __drm_atomic_helper_crtc_destroy_state+0xf3/0x340 [ 276.813252] flush_work+0x18/0x20 [ 276.816772] vkms_atomic_crtc_destroy_state+0x2d/0x40 [ 276.822018] drm_atomic_state_default_clear+0x37c/0xd60 [ 276.827387] drm_atomic_state_clear+0x9d/0xc0 [ 276.831863] __drm_atomic_state_free+0x3c/0xf0 [ 276.836430] drm_atomic_helper_set_config+0xe5/0x160 [ 276.841512] drm_mode_setcrtc+0x613/0x1490 [ 276.845731] ? drm_mode_getcrtc+0x870/0x870 [ 276.850041] ? drm_dev_exit+0x22/0x60 [ 276.853832] ? find_held_lock+0x35/0x130 [ 276.857874] ? drm_dev_exit+0x22/0x60 [ 276.861707] ? drm_lease_owner+0x45/0x60 [ 276.865776] ? drm_is_current_master+0x5c/0x140 [ 276.870438] drm_ioctl_kernel+0x23b/0x2e0 [ 276.874564] ? drm_mode_getcrtc+0x870/0x870 [ 276.878867] ? drm_setversion+0x8c0/0x8c0 [ 276.883023] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 276.888568] ? _copy_from_user+0xdd/0x150 [ 276.892700] drm_ioctl+0x545/0xa50 [ 276.896225] ? drm_mode_getcrtc+0x870/0x870 [ 276.900540] ? drm_version+0x3d0/0x3d0 [ 276.904453] ? smack_log+0x415/0x540 [ 276.908190] ? smk_tskacc+0x2ba/0x390 [ 276.912000] ? drm_version+0x3d0/0x3d0 [ 276.915872] do_vfs_ioctl+0xd6e/0x1390 [ 276.919736] ? smk_curacc+0x7f/0xa0 [ 276.923340] ? ioctl_preallocate+0x210/0x210 [ 276.927724] ? smack_file_ioctl+0x196/0x300 [ 276.932024] ? smack_file_lock+0x240/0x240 [ 276.936238] ? __fget+0x367/0x540 [ 276.939697] ? nsecs_to_jiffies+0x30/0x30 [ 276.943828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.949347] ? security_file_ioctl+0x93/0xc0 [ 276.953736] ksys_ioctl+0xab/0xd0 [ 276.957169] __x64_sys_ioctl+0x73/0xb0 [ 276.961036] do_syscall_64+0x103/0x610 [ 276.964920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.970086] RIP: 0033:0x457f29 [ 276.973258] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.992137] RSP: 002b:00007f9f4a891c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.999823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 277.007077] RDX: 0000000020000180 RSI: 00000000c06864a2 RDI: 0000000000000004 14:14:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc00, 0x0) 14:14:24 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x400000, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) [ 277.014340] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 277.021587] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f4a8926d4 [ 277.028837] R13: 00000000004bfc39 R14: 00000000004d16f8 R15: 00000000ffffffff [ 277.048492] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 277.054985] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 277.074517] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 277.089305] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 277.095995] overlayfs: missing 'lowerdir' [ 277.097280] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 277.100462] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:14:24 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:24 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x2300, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:24 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x4, 0x4, 0x1}, 0x82, r1, r3, 0x80, 0x8, 0x8, 0x10000, 0x9, 0x0, 0x78b, 0x3, 0x3, 0x8, 0xe2d1, 0xfff, 0x100, 0x0, 0xb6cc}}, 0xa0) ioprio_get$uid(0x3, r1) 14:14:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5432, &(0x7f0000000080)) [ 277.136216] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 277.149657] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 277.176017] FAT-fs (loop1): invalid media value (0x00) 14:14:24 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000780)={'syzkaller1\x00', 0x1000}) 14:14:24 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x2600, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 277.190558] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 277.205773] overlayfs: missing 'lowerdir' [ 277.213315] overlayfs: filesystem on './file0' not supported as upperdir [ 277.216089] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 277.228159] FAT-fs (loop1): Can't find a valid FAT filesystem 14:14:24 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 277.271717] kobject: 'loop0' (0000000065af64e9): kobject_uevent_env [ 277.286354] kobject: 'loop0' (0000000065af64e9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 277.304498] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 277.311369] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 277.312180] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 277.321473] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 277.339271] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 277.340639] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 277.350634] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env 14:14:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5433, &(0x7f0000000080)) 14:14:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xd00, 0x0) 14:14:24 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x313b, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 277.367522] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 277.384154] overlayfs: unrecognized mount option "lowerdir" or missing value [ 277.402697] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env 14:14:24 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x8000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x2, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000005580)=[{&(0x7f0000000240)={0x27, 0x1, 0x2, 0x0, 0x7ff, 0x7, "51b8febafef037f7de331b517e45c97513257b46a57fe8bf5140089e083a46008950e2192e06cfa21f27fbb0bd8bf86458e6e726285de64e2212b507e23183", 0x21}, 0x60, &(0x7f0000000700)=[{&(0x7f00000002c0)="486b48a40e4890350e402a2cf8cdb507d90426ab80d6460314a52de3b02a3081c78a93bc9283537a4f0267d15a007d0d66275e39d0a6397f22dcfd5c0ea02fc8856d6a4c6c87ef5915fad9bb6b5b5aaad4f8b2afe25b340015429e477a2b1d16b695ac286492c1754e544acb73ee4d174273e8d30e9f86a5606b7cad5a1bf1aa5e8282ad5d908455bdf35b840ede4467b6c86a4829552682880b532c295dec12a0573b26e1333632380ba2ab7d", 0xad}, {&(0x7f0000000380)="0de03d14f314cef4a6a6dfc90db63a0bfa739dbd7add1bfaba767126477f9a822c6ddd62e87d9f40cadcd4f727d39d6bbf8a618bbf3e6a38ccb0fddb62b70eee97fe5e2164414f8d2694cf506f6c46221099db8e6940f53e0c190372c96511229f90d747da18c3a27c923d59ec5d76ed4d67b2d6c74f380db1a77b58d52bbdd47ec2d9195a1dd7f807458804c1eb0ef01536f9d48cc5e303b95a1081646fbc19ae8885bde3a4c17811f5ec6418bc56b5d8", 0xb1}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="f72d940574dad0b83b22e432cdc32fbaff605ed09cd772f32eba840c017cfdcffb25cc444b8e5481c61102533c40a70c9d866106992e8c6bb7c572488a727aff563873078378ef354515db37547b1f07b6fd2d84b66bcf4ac14da2fe5c84616ee5860497b5a016364d9c0a6d0af67da8491e473501171d95cdf6780811503fe816f8398fd8", 0x85}, {&(0x7f0000000680)="77d8bb319f9ebe3f02605606c690eb44c6efe9f4d11a2e5ff2a8c6decd9f4e95489d6eb203d1b3f2dad8ef02e3938efb17c80e6ef15913c87d913166fb1df926ae23987beb80adcf7e4642cafb3f5ee51cf3a2d148", 0x55}], 0x5, &(0x7f0000000780)={0xa8, 0x102, 0x40, "d8d587ebbe6df02c1e7fc1ce2c92f1b59b436df6b0afaed52355ddefd0cfd62efb70ffd5bc955c3f07adc8175663f6940f42a8bb11976dd527ae08aa89196e8790afc9d6fbc0a9147fea1c43969909cad2ed612c55de05721227ea9de8e67c382ae105a4210385131c18c8fb89e521aa2d988d0a54d4e6b05401e2046ca61ea31f9c34a2ecc9a8a77d199c34ff56dea15a3dadef"}, 0xa8, 0x44}, {&(0x7f0000000840)={0x27, 0x0, 0x2, 0x87ea0958670e7545, 0x8, 0x8b8, "c0cdb3f26c992e579eaa538cfff89cf1a6afa21f2dc7594ded3832ff2c705361bf0de4d81904e8b54f57ec5ea47ce4db455d394dd3017ecf836118c5fd2fe6", 0x3d}, 0x60, &(0x7f0000000440)=[{&(0x7f00000008c0)="4fa78303abdb0854f5f0f25171f87c99888169df41be6716052b93a96ce85cc2d6846637b546948d2ccd1fd27ff8f16176a0efa99a0641d25e52def43f3ca8bcb19a4520353ee15ae6418f8c008dd638", 0x50}], 0x1, &(0x7f0000000940)={0x108, 0x9977bfbfb43c6faf, 0x8, "a68d77ff9c981b5ac3eaa070a4178627dcff0a2918301a1991f299b4c40806dcfb5bbcc453344581f0d955f79b61a2af21183272e8ee75ecc8a7f1b5c567e0f4977d54fcd2519ab018252cfb874b6bbddb9578a49265639d10d05a47b00ba18a26089cb6570ab8b0982d901875400e978bdcff19391204905292bde6f0bb373464446ae07c1d73a55579dca2b2ce910dfa058f400357dd0cbcdae3b3b0258e321d6d42a01a265335ace0197879108ea7aac48db042504ae2787b56e93e8e610374ca308c625958e22451f6121cf3a2185e41708b5315989db1638eb3daf1b84d6a789e30f4e7317495459fb87b4581c588d4"}, 0x108, 0x20000080}, {&(0x7f0000000a80)={0x27, 0x0, 0x2, 0x7, 0x40, 0x7ff, "bb6f46d212f626b1bb9f855837c7e2a848fcab59174884b66d5331295cf48a9b626e6622f15279f714f21bfd6e60080c3e8bbf903acd56c3d332024563c19a", 0x37}, 0x60, &(0x7f0000000b40)=[{&(0x7f0000000b00)}], 0x1, &(0x7f0000000b80)={0x50, 0x115, 0x3, "3917305c709c085eba939d9a3736185faacc2ec9c9c2e0901d2d869113c4911574e253793519259c6a45e54a629b271fb40b9e41bc309ae435"}, 0x50}, {&(0x7f0000000c00)={0x27, 0x0, 0x1, 0x4, 0x2, 0x1, "89281d751605e8aff0acfd2fb8d2acbaa13236ce2b21db5768b52ecf2fd0f973e30f9ddc86db6f87d1cb90642e24ce81a1c9f8c05d2e1e2c25d82474df0d5a", 0x37}, 0x60, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0e387258ce5e93473fff1e49812273c28de5270205c5", 0x16}, {&(0x7f0000000cc0)="18520be787275c8f2ff23d08b4079adb9f9953f141680899525e9bd5e481a4fdf2227f28b160196d02832d5022703a51a082e05acec36fca1da027ac3b26b22afee7514ccca9d0ab44bf136d00c01e486f363495d4f5afa5e18a4f93e8953698d9c880c3fea0b2b838cc58c51e3c567ba585acf2374f4c86b4d5b59071e1d2ad06e4fa4a8342d3219338f406d116f5", 0x8f}, {&(0x7f0000000d80)="1d234b826659e4f6a1438793084cf2abcbc3446e512db4cb3ecd460f0d304e3a4cf35b8d794d2c7801337ed4e89dbd2ed55cf8f632260dddb64ec6c24e01150e8df5136cab8a81597a61bb4272d1ecd5c8f1b28966c429efd309713ec25fb075bb2b0dad646f671b97aac570af3ae1187c8bf1aec7d72682d9669478b97a4766bc8486b81c44c0a48883a76c82e0", 0x8e}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="2bb000225cc45e6634b6e33f6707d3f021ef4a096920b7da4585fad0993a11e9ac5bd643fbff9d3529f98ae183df01d48ff24e368cdb45e73e8292fa8c4398af5824", 0x42}, {&(0x7f0000001f00)="9b2762267273337c18f31f72b7d53d7854b1a46109d54f40284be69b89d025f94f4baedd67fb1d0135752de93784a8f86b0f6dc0a24167a06174d97bf5a7529a029abeec1ecea26b6d7053a1c31e76afb3b5d9cec340a6be08a6d0ad45fb1f467c845568", 0x64}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="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", 0x1000}], 0x9, 0x0, 0x0, 0x8090}, {&(0x7f0000004040)={0x27, 0x1, 0x1, 0x2, 0x80000001, 0x1, "e1dbf49ca88080bba5aafe27751afa17e93c06369c8796a394438fad99eac755cfac1d739991c8dc13f815e2a962d8acabf27be2c2c8e96d1fa68a98fa3368", 0x1f}, 0x60, &(0x7f0000004200)=[{&(0x7f00000040c0)="d4ce80750f0e36d4a0f1f7ad978147debea55540a41225cbc0fa1ae0e4587db9dfb478b3105c8ec390f97e19a0dcacf5c8a361dbe5653da1668cf4a70e0dae76da0aa739a552922b321e9ac28c3b60cfa3bd632bee0718c975ef62b04e2de8dee3eafc5ba6f823dac4f58b720b40dac13961cd91e7c8a879cfaaee9c4dcec281667b01b2fd1e64b2828f93f7376e9bf4e7b0c2743b407cd90b49e4ca0a9dbb1225381c4af06ca937b2dc18c0f3777d9f58efd90756f2bc716bc7963391972c", 0xbf}, {&(0x7f0000004180)="fa1e3c95f7e747828822e42a0dea11fac6c3d2da12fec767223ce76a4df4aa31feda5b8511fd813dcf55fcf7d1f55d9757bee89f0ce787f59aaa0305d7e6aeecf5ecf2e18e093e5ec3af1b3ad1f705254c703ebc1e023bf588cf9424e410bdfaaf8728afa13940c9497df2afcb6bde4e7c8e9d0379bc6e0f712ae7a9671b", 0x7e}], 0x2, &(0x7f0000004240)={0xb0, 0x6, 0x382e, "8559633f44800b23507e3148a80e4cd32a156de26a4c5510404f850ee0bd66325f70ce00f70f54b1541fbd8bf8388c677f5da68f0fc5364e2e1e3d8d72fc1e28230b56a95ab0b75425eb19c7be01a5d1da382e0f5b8d550d531f57dca0e1d0ce8f3d1fcbce98bde19ab673cffe86d949e578ae72fd0a99d3d0f7bd9e2859931c7fb11ec8194a31dd9111e35cba10d0ec45dff32338fc4262fcdc"}, 0xb0, 0x80}, {&(0x7f0000004300)={0x27, 0x0, 0x0, 0x7, 0x7, 0x6, "925ca1df3dd1d7c7e77d368abf1a685a1a624712ff3d36ad45f2bb89d1991d1323d17efb844f7e3346233aca08a55c76089175ceb6fa288118e63b85587c91", 0x3c}, 0x60, &(0x7f0000004500)=[{&(0x7f0000004380)="9ecc2c06dcbc69146e54dad84f53b7dfc44175df", 0x14}, {&(0x7f00000043c0)="2a92d06bae877c7221d03a6966f2393a1f1214e88111549e17414e9ed72bd5e5822f23be82747403d8b5ba12e49c7fab95022eb38f4eac42e3874386dc54fa627574979b5afd62a61f834382082bcdcaafb179397b72", 0x56}, {&(0x7f0000004440)="a69042e6db3e609b8247463f59c6b312a37be65aecf71b1483fab2d0c538aee35f21a4db9329acc5d4f5a2675e78791c6e46c131b680feef08fd937d93b82e204ea6f33208fbe9b6b780f251f3679b0bee752607be079114d91fda5b0e6cbfcec5b912e2ff9368047341d8c31010bf43ba22ab0e808861177caff95eab044443a4789a5ea15448fdef0d2575e3c78e006d3120028096a7", 0x97}], 0x3, &(0x7f0000004540)={0x1010, 0x1, 0x100, "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"}, 0x1010, 0x20000880}], 0x6, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000fddbdf2504000000140009000800010002000000080002004a0b0000380005002c0002000800010011000000080001001700000008200200aace0000080001001e000000280001001f0000000800010036e16574"], 0x60}}, 0x4000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) prctl$PR_SET_FPEMU(0xa, 0x3) getpeername$packet(r1, &(0x7f0000000b00), &(0x7f0000000e40)=0x14) 14:14:24 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 277.432473] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 277.448384] overlayfs: filesystem on './file0' not supported as upperdir [ 277.468687] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 277.470223] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env 14:14:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5434, &(0x7f0000000080)) 14:14:24 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0xbf00, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:24 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x41, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0xd6e, 0x8, 0xff}}) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_REGISTER(r1, 0xc0044308, &(0x7f0000000000)={0x200000}) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000100)={{0x4, @name="c14089748dc624a7872824cf4e7521a938bbbd8859a7bcaf6b45e5adadef7124"}, 0x8, 0x1, 0x9}) 14:14:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1200, 0x0) [ 277.475115] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 277.475457] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 277.500965] overlayfs: unrecognized mount option "lowerdir" or missing value [ 277.513329] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 277.516148] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:14:25 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 277.554455] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 277.566944] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' 14:14:25 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0xf401, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:25 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:25 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) dup(r0) 14:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5435, &(0x7f0000000080)) [ 277.602031] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 277.617409] overlayfs: unrecognized mount option "lowerdir" or missing value [ 277.624104] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 277.643060] kobject: 'loop0' (0000000065af64e9): kobject_uevent_env 14:14:25 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20030}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r3 = getpgrp(0xffffffffffffffff) getpgrp(r3) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=""/216, &(0x7f00000002c0)=0xd8) [ 277.644418] overlayfs: filesystem on './file0' not supported as upperdir [ 277.650068] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 277.669759] kobject: 'loop0' (0000000065af64e9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 277.682513] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 277.689178] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:14:25 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,wor']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:25 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x517565, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x2000, 0x0) [ 277.704032] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 277.726141] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 277.753256] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 277.765829] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 277.768134] overlayfs: unrecognized mount option "wor" or missing value [ 277.772788] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 277.785553] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:14:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x4000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5437, &(0x7f0000000080)) 14:14:25 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:25 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,wor']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 277.796741] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 277.820891] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 277.834233] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:14:25 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:25 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0xfffffffffffffffd, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x7f) [ 277.864323] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 277.879863] overlayfs: filesystem on './file0' not supported as upperdir [ 277.880853] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 277.900527] overlayfs: unrecognized mount option "wor" or missing value 14:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5441, &(0x7f0000000080)) 14:14:25 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x2000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x3f00, 0x0) [ 277.918734] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 277.928368] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 277.934819] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 277.947325] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:14:25 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,wor']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:25 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000100)={0x1, 0x7ff}) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x0, 0x1ff, {0x56, 0x8, 0x1f, {0x6, 0x4}, {0x7fff, 0x7fffffff}, @rumble={0x9, 0x553}}, {0x0, 0xffffffff, 0x2, {0x0, 0x1}, {0x7, 0x9}, @rumble={0x3, 0x2}}}) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x800) ioctl$CAPI_REGISTER(r1, 0xc0044308, &(0x7f0000000000)={0x200000}) [ 277.966748] kobject: 'loop0' (0000000065af64e9): kobject_uevent_env [ 277.974456] kobject: 'loop0' (0000000065af64e9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 277.985095] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 278.031938] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 278.036438] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.053864] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.054760] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 278.066803] overlayfs: unrecognized mount option "wor" or missing value 14:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5450, &(0x7f0000000080)) 14:14:25 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x4000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:25 executing program 4: r0 = dup(0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400000, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000300)='/dev/capi20\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x40, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}], [{@obj_user={'obj_user'}}, {@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_gt={'euid>', r2}}]}}) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0xc0044308, &(0x7f0000000000)={0x200000}) [ 278.073761] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 278.087112] overlayfs: filesystem on './file0' not supported as upperdir [ 278.099212] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env 14:14:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc000, 0x0) 14:14:25 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 278.132638] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 278.153119] kobject: 'loop0' (0000000065af64e9): kobject_uevent_env [ 278.160163] kobject: 'loop0' (0000000065af64e9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 278.175428] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env 14:14:25 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:25 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1d6, 0x309000) sendfile(r0, r0, &(0x7f00000000c0), 0x95) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x81, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x4000, @local, 0x6}}, 0x4, 0xe930, 0x1, 0x200, 0x4}, &(0x7f0000000240)=0x98) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x800) ioctl$CAPI_REGISTER(r2, 0xc0044308, &(0x7f0000000000)={0x1}) 14:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5451, &(0x7f0000000080)) 14:14:25 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x5000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 278.201655] overlayfs: workdir and upperdir must be separate subtrees [ 278.212080] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 278.233209] overlayfs: filesystem on './file0' not supported as upperdir 14:14:25 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5452, &(0x7f0000000080)) 14:14:25 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x2000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x18b, r3}) r4 = fcntl$getown(r0, 0x9) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000001c0)={0x8000, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) syz_open_procfs(r4, &(0x7f0000000080)='timers\x00') ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) [ 278.250069] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 278.256526] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 278.268599] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.275314] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.285399] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 278.292325] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:14:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xf000, 0x0) [ 278.302576] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 278.320858] overlayfs: workdir and upperdir must be separate subtrees [ 278.331617] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:14:25 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 278.346791] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.351963] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 278.365855] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 278.378046] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 278.388365] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:14:25 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x6000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5456, &(0x7f0000000080)) 14:14:25 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x101000, 0x0) r1 = getuid() r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r1, r2) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) [ 278.401388] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 278.407868] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 278.410521] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.418366] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 278.435156] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 278.447131] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 278.453912] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 278.486317] overlayfs: workdir and upperdir must be separate subtrees [ 278.488969] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 278.508051] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 278.516701] overlayfs: filesystem on './file0' not supported as upperdir [ 278.518392] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.545190] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:14:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x8000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5457, &(0x7f0000000080)) 14:14:26 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x400000, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:26 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./fi']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xff01, 0x0) [ 278.561222] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 278.567826] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 278.578443] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 278.585301] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 278.605367] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.613653] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.615614] overlayfs: failed to resolve './fi': -2 [ 278.626200] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 278.635078] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 278.648574] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.649615] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env 14:14:26 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0xfffffffffffffffe, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) ioctl$KDENABIO(r1, 0x4b36) 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:26 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./fi']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 278.655011] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.700206] overlayfs: filesystem on './file0' not supported as upperdir 14:14:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x545d, &(0x7f0000000080)) 14:14:26 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000000c0)=0x80000001) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000080)={0x7ff, 0x10000, 0x9, 0xff, 0x8001, 0x5, 0xfff}) 14:14:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xff0f, 0x0) [ 278.714959] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 278.731371] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.737837] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.738546] overlayfs: failed to resolve './fi': -2 [ 278.764825] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 278.774315] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:14:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x1f000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:26 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./fi']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:26 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x4, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) [ 278.817304] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 278.821010] overlayfs: filesystem on './file0' not supported as upperdir [ 278.827949] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 278.842863] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 278.862973] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 278.874971] overlayfs: failed to resolve './fi': -2 [ 278.875576] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 278.886920] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 278.891076] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.897332] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env 14:14:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x23601, 0x0) 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x20000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:26 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x5460, &(0x7f0000000080)) [ 278.910854] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.919687] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 278.935809] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.953168] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 278.969191] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 278.975733] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.003130] kobject: 'loop3' (000000000c736144): kobject_uevent_env 14:14:26 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x174, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1b37}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2c}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x91}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x54}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5d039943}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5ba}]}, 0x174}}, 0x8080) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r2, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x21000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 279.030192] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 279.037588] overlayfs: filesystem on './file0' not supported as upperdir [ 279.048766] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 279.065624] overlayfs: failed to resolve './file': -2 14:14:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x200000, 0x0) 14:14:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x40045431, &(0x7f0000000080)) 14:14:26 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 279.071528] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 279.093396] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 279.103649] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 279.111667] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 279.121373] kobject: 'loop0' (0000000065af64e9): kobject_uevent_env 14:14:26 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}], 0x3d, 0x0, &(0x7f0000000100)="5a38d3f4c617208442b0e61f317c970749ff6fc58dafde4f57dc06d3619d81e96db40b895d25641fe949fe9de3668ad449c002291b5feca385d60a56f2"}) 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 279.127886] kobject: 'loop0' (0000000065af64e9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 279.128742] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.138777] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 279.153470] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.163870] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x23000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 279.200462] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 279.204957] overlayfs: failed to resolve './file': -2 [ 279.222263] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 279.228070] overlayfs: filesystem on './file0' not supported as upperdir [ 279.232152] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env 14:14:26 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000040)={'bond_slave_0\x00', 0x400, 0x6}) 14:14:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xf0ffff, 0x0) 14:14:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x40045436, &(0x7f0000000080)) 14:14:26 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 279.245819] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 279.256579] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.268302] kobject: 'loop3' (000000000c736144): kobject_uevent_env [ 279.276657] kobject: 'loop3' (000000000c736144): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:14:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x40049409, &(0x7f0000000080)) [ 279.314643] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 279.339793] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 279.352131] overlayfs: filesystem on './file0' not supported as upperdir 14:14:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 14:14:26 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x26000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 279.360869] overlayfs: failed to resolve './file': -2 [ 279.364711] kobject: 'loop0' (0000000065af64e9): kobject_uevent_env [ 279.387228] kobject: 'loop0' (0000000065af64e9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 279.402772] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env 14:14:26 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(0x0, 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000000, 0x0) 14:14:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x4020940d, &(0x7f0000000080)) 14:14:26 executing program 4: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x3f, 0x8, 0x6, 0xce, 0x800, 0x6446, 0x3}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001a00)=ANY=[@ANYBLOB="000000b525be564a7a76d6315b78983900"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=ANY=[@ANYBLOB="00000000000000000000000000000001fe800000000000000000000000000200000000000000ffffffffff00ff0000ffff00000000000000000000ffffffffff76657468305f746f5f6272696467650062707130000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00060600000000000000000000000000000000c800080100000000000000000000000000000000000000000000000040005443504f5054535452495000000000000000000000000000000000000000040000000100000002000000dd0300003f00000005000000030000000700000000000000000000000000000000000001fe8000000000000000000000000000aaffffffffffffffffb1d3e1ae00000000ff00000000000000000000000000000076657468305f746f5f6272696467650069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000001f0140000000000000000000000000000000c800080100000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000eea7d2f8fd50c90d565daf5b075f27550084ed46bd81122105fb90161dac00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010013801000000000000000000000000000000000000000000000000480068626800000000000000000000000000000000000000000000000000000000100000070100001f00c201ffff6a0308000100faffff0002000700008009000400ff0301010b002800534554000000000000000000000000000000000000000000000000000001eb0f009e00000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000000000e7fffffffeffffff00000000"], 0x1) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000040)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000027c0), 0x0, &(0x7f00000029c0)}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) r1 = open(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) ftruncate(r3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@remote}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000400)={{0xff, 0x5, 0x69, 0x4, 0x2, 0x1}, 0x6}) close(r4) sendmsg$rds(r5, &(0x7f0000001c00)={&(0x7f0000000080), 0x10, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000001b40), 0x0, 0xffffffffffffffff}, 0x0) close(r5) [ 279.413921] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 279.435190] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 279.443242] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.458651] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env 14:14:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x3b310000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 279.463710] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 279.470610] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.472238] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 279.494285] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 279.528527] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 279.537610] overlayfs: filesystem on './file0' not supported as upperdir [ 279.556988] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env 14:14:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x402c542b, &(0x7f0000000080)) 14:14:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1360200, 0x0) [ 279.570827] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.575891] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env 14:14:27 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x65755100, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:27 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(0x0, 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 279.617729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 279.621300] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 279.649480] kobject: 'loop0' (0000000065af64e9): kobject_uevent_env [ 279.657043] kobject: 'loop0' (0000000065af64e9): fill_kobj_path: path = '/devices/virtual/block/loop0' 14:14:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 279.682504] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 279.707392] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:14:27 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0x95ffffff, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 279.745483] overlayfs: filesystem on './file0' not supported as upperdir [ 279.755923] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 279.769371] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env [ 279.775806] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:14:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x402c542c, &(0x7f0000000080)) 14:14:27 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(0x0, 0x0, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') [ 279.788136] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:14:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x2000000, 0x0) [ 279.828814] kobject: 'loop4' (00000000d4006fec): kobject_uevent_env [ 279.835263] kobject: 'loop4' (00000000d4006fec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 279.860347] kobject: 'loop1' (000000003c21bb94): kobject_uevent_env 14:14:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x402c542d, &(0x7f0000000080)) 14:14:27 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x1, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000300)={0x4, 0x3, 0x9}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x400002) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="85d4f8102cf890b193ba787e967a6811"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1e2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x920a}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7e50d43e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x40880) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0xc0044308, &(0x7f0000000000)={0x200000}) [ 279.881377] kobject: 'loop5' (0000000035a95571): kobject_uevent_env [ 279.887820] kobject: 'loop5' (0000000035a95571): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 279.897367] kobject: 'loop1' (000000003c21bb94): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:14:27 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000001c0)={0xfffffffffffffffb, 0x0, 'client1\x00', 0x0, "eedc1a203195d042", "6353e2bcf0a3d1943e8c9a6b99c8f2e8c259aee743e4cd28a53b43a0442a40ae"}) write$sndseq(r0, &(0x7f0000000000)=[{0xbf000000, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:14:27 executing program 2: mkdir(&(0x7f0000000300)='.//ile0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0\x00') 14:14:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETSW(r1, 0x80045430, &(0x7f0000000080)) 14:14:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0xfffffffffffffffd) unlink(&(0x7f0000001e00)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 279.935760] kobject: 'loop2' (00000000b3765eca): kobject_uevent_env [ 279.955042] kobject: 'loop2' (00000000b3765eca): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:14:27 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0xc0044308, &(0x7f0000000000)={0x200000}) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) 14:14:27 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc53