2e2f66696c65312c7560b0f0d2a484e674860d6b70706572"]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000340)="364af971d97b15f7be608a6a9600ddd8242d290470717cb9d8cf4ce9519c9d45bc70b5ccc0a1ce009bc567458d2c4e99e4dfb2d4b0ae8747eaf6fc23d6d08bcd313609d982791a8705144f6fe593047c08a1b79b1779ff24f6b97162eb1e178c6068495f480289179d60e49ba2d936872925f175dabae5b8d21ee006771b2038f7acf952ee39ffc73c4a81", 0x8b}, {&(0x7f0000000440)="09ca7659da72e5d8cc73c9bb88a4c5ddef38a492ec00565aa5ee291bee3ca5bc4a49494719f23edaba7520e7af7fd86667cdd97062dc915de5e596bbb5bdecb4a56cf4729b2bee14b5129883d9d227f0930c5494e4887313ecc69808f3c43d11ad627dbfaec96347e3042f8f036b0859e6df341a323911af7b66f0faddc0e4598063c978a84fc0ec533b8e617b532a19db839ac5952d389af9ca6b9c3ad8b9eaa9ccc5f56f258ac71e4aa2859721e77e611fef47b4e872dc9537c0e82f2a83d780b1cf244d4b4cda", 0xc8}, {&(0x7f0000000540)="5627f6f13f9f1035287ceb809e656319924192f7f5006e58e2b91a3fe7b46b76ef963b83e311dd73b62f482f67b1be5d31794839444727ab794cce7d7ed069c0fcb45f58dc7c7dfdbef3f782eb16dd445fb38a6c77f359571d6cbaaa86b82547b623b6241395e082c175c4a266de3f7cbb7ca58ccf9a898bedbbafcdbd861261ff026dbf738a8a47ba00ff468ed0a2ccea24bfe49e26f4b08ca42c947c33d0d8f432b493687031ac70b23406f2080fda2aaf32ce2ef419e1a442a5de672446a5d298bfce130736756fa0aa77d3cf79d1de00", 0xd2}, {&(0x7f0000000640)="bd595df08e9b2c9c79afcfe165e59835e20e4cd12f19cceca314807a6b2c278c5d08c0d06b099e61757b01cbf485ef3863b7fbc99526c661d2650c5cc0bdf6cf18c43d5e2ced5cfc583e32657c932e943bbddf0eae79bb0de74f30de352467d27df5bd268be0f7b6af9cb559545018c512785db553cf489805d67e106c9af25d58851eb5590a71810f0c97b6c29ea8840353", 0x92}, {&(0x7f0000000700)="b4bd349e55852c51c68f5a9bbf067336507e881eb15e5cc1f3c1ad089136853fa9e9cd85c25ce27f5735c93e01e4212de6d813029a5e558ee99dd4d6cb879c8cfa86396b5cecc630d771deb2b978c662f10ec16729f789a9889836fbcd8a4380d303c44cbb015a8f85747380fba9109a8ebe2ce668fcaab027166b9e12", 0x7d}], 0x5, 0x0, 0x0, 0x4000040}, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000240)={0x7fff, "2054d02c64a666eeb3af06baf5aaf63055de01235cb224f95a8ecc8a0aa9adcd"}) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:24 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket$inet_smc(0x2b, 0x1, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1424.693019][T16658] xt_TCPMSS: Only works on TCP SYN packets [ 1424.728423][T16655] overlayfs: unrecognized mount option "u`°ðÒ¤„æt† kpper" or missing value 10:10:24 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1424.801030][T16655] overlayfs: unrecognized mount option "u`°ðÒ¤„æt† kpper" or missing value [ 1424.825202][T16656] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:24 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x9, 0xffffffd1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a5e, 0x9, [], @value64=0xffffffff}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000140)={0x8, 'netpci0\x00', {'vlan0\x00'}, 0x3f}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x4800, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:24 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x2, 0x80) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000380)=0x5) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x101000, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:24 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket$inet_smc(0x2b, 0x1, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:24 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1425.192683][T16842] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:24 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000140)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1425.299798][T16842] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:24 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000080)='./bus/file0\x00') rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:24 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1425.495564][T16995] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1425.746022][T17008] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0008", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x4c00, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:25 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket$inet_smc(0x2b, 0x1, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:25 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000004c0)={{&(0x7f00000003c0)=""/38, 0x26}, &(0x7f0000000480), 0x20}, 0x20) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f00000005c0)={&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000580)=""/3, 0x3}) setreuid(0x0, r5) setxattr$security_capability(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x7, 0x3}, {0x4, 0xfffffff8}], r5}, 0x18, 0x1) 10:10:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x2, 0x4}}, 0x20) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r1 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e22, 0x1, @mcast2, 0x20}, {0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, [], 0x2f}, 0x4}, 0x9, [0x6, 0x2, 0x7, 0x3, 0x1, 0x7fffffff, 0x0, 0x6]}, 0x5c) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:25 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1426.121841][T17026] xt_TCPMSS: Only works on TCP SYN packets [ 1426.154997][T17019] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1426.162509][T17027] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1426.166128][T10389] tipc: TX() has been purged, node left! 10:10:25 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:25 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380)="b8267ccd66e508691d1e59c553436985f7b439d44d8264224376a08dc7187fcfaab26a52755592bfa3007167170b990b970c7224cd5c84b327638f1d82cc34c1db90b9989e1957a67ff354a3cafa8df9", 0x50, 0x2, &(0x7f0000000140)) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x6000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1426.282978][T17027] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:25 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x801, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1426.428183][T17140] overlayfs: failed to resolve './file1': -2 10:10:25 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socket$inet_smc(0x2b, 0x1, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:25 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1426.640239][T17248] overlayfs: failed to resolve './file0': -2 [ 1426.674830][T17251] overlayfs: failed to resolve './file0': -2 [ 1426.696250][T17250] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1426.913296][T17256] overlayfs: failed to resolve './file1': -2 10:10:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0076", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:26 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) sendto$llc(r0, &(0x7f0000000380)="3ece7b135a60c5c0e420e832df036d0f4a", 0x11, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x290100, 0x0) getpeername$netrom(r2, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @null, @rose, @default, @default, @default, @default, @rose]}, &(0x7f0000000240)=0x48) mkdir(&(0x7f0000000080)='./file0\x00', 0xd2) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000340)) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:26 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:26 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x1, 0x80) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) socketpair(0x26, 0x800, 0x3b, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x800, 0x4) accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r11 = gettid() stat(&(0x7f0000000480)='./bus/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() r14 = openat$cgroup(r0, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) r15 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r15, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r16 = open_tree(r15, &(0x7f0000000580)='./bus/file0\x00', 0x0) r17 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r17, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000108000000000000010000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dfc822ab06f5a00e39f5b83da2bd43ce19cb322537d0"]) accept$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r18 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r18, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f00000005c0)=0x0) r20 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r20, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r20, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r22 = getuid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r23, 0x0) r24 = getpid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r25, 0x0) r26 = gettid() sched_getparam(r26, &(0x7f0000000100)) r27 = getpgid(r26) r28 = getgid() r29 = gettid() sched_getparam(r29, &(0x7f0000000100)) r30 = getuid() stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r32, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r33 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000003c0005002dbd7000fcdbdf2508002a00", @ANYRES32=r9, @ANYBLOB], 0x18}], 0x1, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x24, 0x1, 0x1, [r4, r6, r14, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, 0xffffffffffffffff, r28}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x24, 0x1, 0x1, [r32, 0xffffffffffffffff, r33, 0xffffffffffffffff, r1]}}], 0x128, 0xc800}, 0x4010) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x6800, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:26 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1427.448218][T17265] xt_TCPMSS: Only works on TCP SYN packets [ 1427.502216][T17280] overlayfs: failed to resolve './file1': -2 [ 1427.513147][T17262] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:26 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:27 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x6c00, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1427.704118][T17384] overlayfs: failed to resolve './file1': -2 10:10:27 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:27 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000340)={0x0, @bt={0x401, 0x7fff, 0x0, 0x2, 0x5, 0x8f, 0x800000, 0x5, 0xfffffffe, 0x3, 0x6, 0xffffff82, 0x800, 0xfc83, 0x7, 0x1, {0x2}, 0x3, 0xff}}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275730800af4f780bff2281d81438905e6b3c7ef439597e8b7f9cdebd80f72f66696465312c75707065726487c069cc"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:27 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1427.911879][T17470] overlayfs: failed to resolve './file1': -2 [ 1427.991267][T17494] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1428.034725][T17494] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:10:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd00ff", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:28 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:28 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1428.897122][T17608] overlayfs: failed to resolve './file1': -2 10:10:30 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x7400, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:30 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) statfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000000340)=""/105) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000e0010000c6b47a2314b27daf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000010800000000000001000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003668de9423804f22941c320cd7dc3b0aae625b33335f5e3699291709eaba8841d96561c3fff96a"]) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000240)={@dev, 0x0}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000540)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000280)={r8, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'veth0_to_bond\x00', r8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00', 0x0}) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000d80)=0xe8) r14 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r14, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000e80)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000f80)=0xe8) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r19, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r20 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r20, 0x107, 0x1, &(0x7f0000000280)={r19, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r19}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003440)={'team0\x00', r19}) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r25, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r26 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r26, 0x107, 0x1, &(0x7f0000000280)={r25, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r22, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r25}}, 0x20}}, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r30, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r31 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r31, 0x107, 0x1, &(0x7f0000000280)={r30, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r27, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r30}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003480)={'ip6erspan0\x00', 0x0}) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r35, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r34, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r36, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r37 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r37, 0x107, 0x1, &(0x7f0000000280)={r36, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r33, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r36}}, 0x20}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f00000034c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003540)=""/112, 0x70}, {&(0x7f00000035c0)=""/221, 0xdd}, {&(0x7f00000036c0)=""/9, 0x9}, {&(0x7f0000003700)=""/14, 0xe}], 0x4, &(0x7f0000003780)=""/89, 0x59}, 0x40000000) r39 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r39, 0xc0c0583b, 0x0) getpeername$packet(r39, &(0x7f0000005300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005340)=0x14) r41 = socket$netlink(0x10, 0x3, 0x0) r42 = socket$netlink(0x10, 0x3, 0x0) r43 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r44, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r45 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r45, 0x107, 0x1, &(0x7f0000000280)={r44, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r41, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r44}}, 0x20}}, 0x0) r46 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r46}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r46, 0x8933, &(0x7f0000005400)={'batadv_slave_0\x00', 0x0}) r48 = socket$netlink(0x10, 0x3, 0x0) r49 = socket$netlink(0x10, 0x3, 0x0) r50 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r50, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r50, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r49, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r51, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r52 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r52, 0x107, 0x1, &(0x7f0000000280)={r51, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r48, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r51}}, 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000005440)={@initdev, @local, 0x0}, &(0x7f0000005480)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000054c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000055c0)=0xe8) r55 = socket$netlink(0x10, 0x3, 0x0) r56 = socket$netlink(0x10, 0x3, 0x0) r57 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r57, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r56, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r58, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r59 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r59, 0x107, 0x1, &(0x7f0000000280)={r58, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r55, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r58}}, 0x20}}, 0x0) r60 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r60}) getsockopt$inet_pktinfo(r60, 0x0, 0x8, &(0x7f0000005cc0)={0x0, @remote, @dev}, &(0x7f0000005d00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005e00)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000005f00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000006240)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006500)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000006600)=0xe8) r65 = socket$netlink(0x10, 0x3, 0x0) r66 = socket$netlink(0x10, 0x3, 0x0) r67 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r67, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r67, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r66, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r68, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r69 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r69, 0x107, 0x1, &(0x7f0000000280)={r68, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r65, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r68}}, 0x20}}, 0x0) r70 = socket$netlink(0x10, 0x3, 0x0) r71 = socket$netlink(0x10, 0x3, 0x0) r72 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r72, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r72, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r71, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r73, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r74 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r74, 0x107, 0x1, &(0x7f0000000280)={r73, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r70, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r73}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000007080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000007040)={&(0x7f0000006640)={0x9e0, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r30}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r32}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x9bcf, 0x5, 0x80, 0x1000}, {0x3, 0x3, 0x6, 0x4}, {0x2e4, 0x5, 0xb5, 0x84}, {0x8, 0xf1, 0x14, 0x134}, {0x4, 0x6, 0x3f, 0x400}, {0x80, 0x33, 0xab}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x8, 0x2, 0x1f, 0xfff}, {0x5, 0x6, 0x5, 0x3}, {0xf512, 0x1, 0x1, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r36}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r38}}}]}}, {{0x8, 0x1, r40}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r44}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r47}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xea42}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r51}}}]}}, {{0x8, 0x1, r53}, {0x4}}, {{0x8, 0x1, r54}, {0xe4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x101, 0x20, 0x56, 0x5}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x5, 0x7, 0x1}, {0xd72, 0xcf, 0x6, 0x400}, {0xd3, 0x3, 0x1, 0x3}, {0x6be2, 0x1, 0x1, 0xffff}, {0x8, 0x3, 0x8, 0xfffffffc}, {0x9, 0x7f, 0x5, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r58}}, {0x8}}}]}}, {{0x8, 0x1, r61}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r62}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9e8d}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r63}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r64}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xfffa, 0x81, 0x81, 0x8}, {0x8000, 0x81, 0x16, 0x40}, {0xbd88, 0x0, 0x3, 0x1f}, {0x2, 0x40, 0x3f, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r68}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r73}}}]}}]}, 0x9e0}, 0x1, 0x0, 0x0, 0x40}, 0xc0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:30 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:30 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x7, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:30 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1430.817454][T17627] xt_TCPMSS: Only works on TCP SYN packets [ 1430.834227][T17625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1430.860288][T17626] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:30 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:30 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:30 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) 10:10:30 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1431.179598][T17747] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:30 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:30 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r3}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @ioapic={0x10c000, 0x14ce, 0x1ff, 0x8, 0x0, [{0x0, 0x1, 0x1f, [], 0x7}, {0x20, 0x0, 0x5, [], 0x1}, {0x9, 0x0, 0x8, [], 0x1}, {0x3, 0x7, 0x9}, {0x8, 0x3, 0x1, [], 0x1}, {0x3b, 0x40, 0x0, [], 0x58}, {0x7, 0xff, 0x2, [], 0x7f}, {0x7, 0x5, 0x2, [], 0x81}, {0x6, 0x8, 0x7d}, {0x8, 0x6, 0x1, [], 0x2}, {0x1, 0x6, 0x2, [], 0x8}, {0x1f, 0x80, 0x9, [], 0x9}, {0x9, 0x0, 0x7f, [], 0x5}, {0x0, 0x7, 0x3f, [], 0x4}, {0x5, 0x7f, 0x40, [], 0x20}, {0xf9, 0x9, 0x8, [], 0xc0}, {0x1, 0x3, 0x6, [], 0x1}, {0x40, 0x6c, 0x4, [], 0x9}, {0x1f, 0x9, 0x5, [], 0x5}, {0x8, 0x9, 0x3, [], 0x7}, {0x4, 0x9, 0x1, [], 0x3f}, {0x9, 0x2, 0x5, [], 0x57}, {0x2, 0x4, 0x1, [], 0x4b}, {0x0, 0x1, 0xff, [], 0x86}]}}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) rt_sigtimedwait(&(0x7f0000000140)={[0x6]}, &(0x7f0000000380), &(0x7f00000001c0)={0x77359400}, 0x8) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x7a00, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1431.423287][T17687] device veth19 entered promiscuous mode [ 1431.450007][T17625] device veth19 left promiscuous mode [ 1431.541500][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1431.562137][T17741] device veth19 entered promiscuous mode [ 1431.570509][T17748] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1431.599368][T17771] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1431.606901][T17751] device veth21 entered promiscuous mode [ 1431.618053][T17770] xt_TCPMSS: Only works on TCP SYN packets [ 1431.959216][T17625] device veth21 left promiscuous mode [ 1431.996879][T17625] device veth19 left promiscuous mode 10:10:31 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x408002, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir0./file1,upperdir=./fkle0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:31 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:31 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc001, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x76, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) [ 1432.152341][T17884] xt_TCPMSS: Only works on TCP SYN packets [ 1432.174921][T17886] overlayfs: failed to resolve './file0': -2 10:10:31 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:31 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1432.265582][T17939] overlayfs: unrecognized mount option "workdir0./file1" or missing value 10:10:31 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000340)) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x69, 0x0, &(0x7f00000000c0)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5f3c1c8f5b0c5ecd147b37714ad8468a21c9294c56c94eae9461689236aa0135e3ad75a161e87cd32fb217ab969a309ffa4e52192645dcdb9900db37f1f6897f7e0318d4950c7714bf1d1a682e8ab36ee674e"]) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xfffffffffffffe45) [ 1432.316000][T18081] overlayfs: unrecognized mount option "workdir0./file1" or missing value 10:10:31 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./bus/file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f0000000340)="a8fa7dabe0405108cad1564bce929291ba383cf32621b0ed1583133fcbf8c8288cbcec269a887c115de6e1087dad231056daeadc0ce16d979cf26393ba2421348174d8615d6b7a621f1e67a468ecdb4ec31c3892544a1ca0772bce40759efe68859d5eef617b0348660b11692e25f0a7a3d0cac343fed69eb9579d158ad518cef4724ba45c", 0x85, 0x101}], 0x2000080, &(0x7f0000000240)='bpf\x00') mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002840)='./bus\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$msdos(&(0x7f0000000440)='msdos\x00', &(0x7f0000000480)='./bus\x00', 0x2, 0x6, &(0x7f0000002780)=[{&(0x7f00000004c0)="19cda3a0214f8c3084ce32ca0576e597175a8db8239dc2002103b0e1b8586506664bcf6131557f7956ccfeff2277d48d1d45120d2afad600b7aef0ed9eb159abe39da586399814e94ed485d8e94277f1e5c902be3092556ea1ce91b765e47724262b020bace7f3012f04c995a8dc7e2b2b24ae4dc96697108777012d475be876555c7726a78404f325c4c9ff2a8bdcafc801e40e78d067dc18d743f4bc1cb60b861d7d9357428dbcc7cded2ae635adf188e5541783dbf73b67f08c3a8564c3a97425be", 0xc3, 0x80000001}, {&(0x7f00000005c0)="afa030de69cc9e3b55c03165f000d3db97c22ecdc472a767eb75c96c64a2cd26f08499ee661c7b9723eb40a33ab6f9d1b548e92d5bbc34c6f7a3a2b67198afff71a028a649ac1917ab804ad074ea0df613f420ee61829e7cfffd72f4b2e33f75abd7ccb4a65eec7211c58ce858eaf07e4f3a0bf0c02a1cef4935a8385bebe2504cd54a82c2ec88600f7a717a4a11d47f4294e1e2bdf994cd2ace765d27032a6d8d59470ad0bfd4d5e594d13ad2a8235b9c8b458ddb747e31ee73e781f1ccac783842580d2b390cdf47496ea0ffddca40ac9d08ba1b2d5924d810418915a666c938a408224f0bc578110322cd0ed097bf80320440", 0xf4, 0x8}, {&(0x7f00000006c0)="18ec", 0x2, 0xfffc000000000000}, {&(0x7f0000000700)="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", 0x1000, 0x3}, {&(0x7f0000001700)="02bfcf58bad68f86a71d798ee7fba75cd3371951c8a4421fe591c485f02afdbfb609fb04bf9fe319d1cd327f9f5f241b0f878e5d6052b2aa33da24fbd9026900b11a9624c13c2b7632a8ca75355a793a74244cbcfc25b17760cd68", 0x5b, 0x6a5e}, {&(0x7f0000001780)="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", 0x1000, 0x2}], 0x810, &(0x7f0000002900)={[{@fat=@nfs='nfs'}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@discard='discard'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@dots='dots'}], [{@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nfs4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'bpf\x00'}}, {@fsname={'fsname', 0x3d, 'nfs4\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x62, 0x36, 0x34, 0x65, 0x65, 0x61], 0x2d, [0x32, 0x0, 0x63, 0x36], 0x2d, [0x32, 0x64, 0x32, 0x60], 0x2d, [0x62, 0x66, 0x64, 0x39], 0x2d, [0x63, 0x65, 0x61, 0x32, 0x38, 0x65, 0x30, 0x32]}}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r0}}, {@pcr={'pcr', 0x3d, 0x32}}]}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/ocfs2_control\x00', 0x80, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = openat$cgroup_subtree(r3, &(0x7f0000002a80)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r6) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r8) stat(&(0x7f0000002b80)='./bus/file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002c40)='./bus/file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000002b00)='./bus/file0\x00', &(0x7f0000002b40)='system.posix_acl_default\x00', &(0x7f0000002d00)={{}, {}, [{0x2, 0x4, r6}, {0x2, 0x2, r8}, {0x2, 0x1, r9}], {0x4, 0x1}, [{0x8, 0xf, r10}, {0x8, 0x0, r1}], {0x10, 0x1}}, 0x4c, 0x1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000002ac0)={0x2005}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1432.453573][T18098] overlayfs: failed to resolve './file0': -2 10:10:31 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:31 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1432.541803][T18104] nfs4: Unknown parameter 'bpf' 10:10:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc800, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1432.689043][T18104] FAT-fs (loop5): Unrecognized mount option "appraise_type=imasig" or missing value [ 1432.760811][T18206] overlayfs: failed to resolve './file0': -2 10:10:32 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000140)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1432.824674][T18220] xt_TCPMSS: Only works on TCP SYN packets 10:10:32 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:32 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:32 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c, 0x80800) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) r3 = accept$unix(r2, &(0x7f0000000340)=@abs, &(0x7f0000000240)=0x6e) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000003c0)=0x1, 0x4) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) shutdown(r3, 0x1) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r4 = gettid() sched_getparam(r4, &(0x7f0000000100)) mount$overlay(0x400000, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f43773d2e2f6275f32c67d2046b6469723d2e2f66696c65312c7505000000640000005cf8", @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES32=r0]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x4, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x40000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:33 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:33 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad962c4ce214db14000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000"/178]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:33 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:33 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./bus/file0\x00'}, 0x10) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x118, 0x0, 0x0, 0x118, 0x0, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, &(0x7f0000000080), {[{{@ipv6={@ipv4={[], [], @empty}, @local, [0xffffffff, 0xff, 0x7a60974f832fa448, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'lo\x00', 'caif0\x00', {0xff}, {}, 0x2b, 0x7, 0xb834117b3a4ff2ae, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x12fb, 0x2, 0xfffffff7, 'snmp\x00', {0x2c}}}}, {{@ipv6={@mcast1, @local, [0xff000000, 0xffffffff, 0xffff00, 0x100000100], [0x0, 0x0, 0xffffff00, 0xff], 'veth0_to_bridge\x00', 'syzkaller0\x00', {0xff}, {}, 0x1, 0x0, 0x0, 0x48}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0xfffffff8, 0x5, 0x0, [0x2, 0x7, 0x3, 0x768, 0xfff, 0x8000, 0x7, 0x7, 0x4, 0xff, 0x9, 0x8000, 0xfc00, 0x3f, 0x401, 0x6], 0xf}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x18, 0xad, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x2}, {0xffffffffffffffff, 0x5, 0x2}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) [ 1433.769632][T18456] xt_TCPMSS: Only works on TCP SYN packets [ 1433.827240][T18455] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:33 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:33 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xa000a0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:33 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1433.969663][T18570] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:33 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1434.131085][T18578] overlayfs: failed to resolve './file0': -2 10:10:33 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1434.327987][T18688] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1434.357736][T18688] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1434.410933][T18693] overlayfs: failed to resolve './file0': -2 10:10:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x6, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:34 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:34 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) ioctl$RTC_PIE_OFF(r0, 0x7006) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:34 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:34 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x1000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1435.082627][T18701] overlayfs: failed to resolve './file0': -2 [ 1435.114521][T18710] xt_TCPMSS: Only works on TCP SYN packets 10:10:34 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:34 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1435.173322][T18709] overlayfs: './bus' not a directory 10:10:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x2000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:34 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xd20, &(0x7f0000000180)) socket$inet(0x2, 0x0, 0x7f) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)=ANY=[]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000140)) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r6}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x1, 0x3, 0x2, {0xa, 0x4e22, 0x17, @rand_addr="e6d57a8594402d1b0283139ce05ef1e3", 0x401}}}, 0x32) [ 1435.288065][T18709] overlayfs: './bus' not a directory 10:10:34 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c0a7074b46ab9e89c2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530cc3f9da62b34700f0d848730ff"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:34 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1435.613953][T18948] overlayfs: unrecognized mount option "l [ 1435.613953][T18948] pt´j¹èœ./bus" or missing value [ 1435.668995][T18948] overlayfs: unrecognized mount option "l [ 1435.668995][T18948] pt´j¹èœ./bus" or missing value 10:10:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x29, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:35 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:35 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r3}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={r4, r5+10000000}) socket$inet(0x2, 0x1, 0x80) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000580)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000e0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000001080000000000000100008000"/192]) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) 10:10:35 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:35 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x10000, &(0x7f0000000400)=ANY=[]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x3000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1436.430298][T18960] xt_TCPMSS: Only works on TCP SYN packets 10:10:35 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1436.476302][T18961] overlayfs: missing 'lowerdir' 10:10:35 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1436.522285][T18961] overlayfs: missing 'lowerdir' 10:10:36 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus\x00') 10:10:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000e001000000000033c2ecf49a54bae0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffffffffffff000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5badcec1563398cc9e461dc1ad1c618ba459ab161961c02a441254c"]) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r6, 0x0, 0x2, 0x4}}, 0x20) 10:10:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x4000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1436.691919][T19077] overlayfs: failed to resolve './file1': -2 10:10:36 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1436.882940][T19088] overlayfs: failed to resolve './file1': -2 [ 1436.953276][T19168] overlayfs: failed to resolve './file1': -2 10:10:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2b, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:37 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:37 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530f01e0f2b9523992b1e6ef54097a97499dd981fda1e7cac37d7a3efd15a036fdab07e306b99b0debb4f52dc35fdf0fe863957821494630afb883ddcc48651b2ad75498bc733c2654a1b3f5754db9df5ffff0000000000003a8e000000ccd1a6cb5e7ed068f1717d0d4edb72a87ac1"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:37 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:10:37 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x31b) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8000, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x2710, 0x1, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffff2) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x5000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1437.807847][T19316] xt_TCPMSS: Only works on TCP SYN packets 10:10:37 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) [ 1437.848707][T19318] overlayfs: failed to resolve './file1': -2 [ 1437.873504][T19319] overlayfs: failed to resolve './file0ð+•#™+nõ@—©t™Ý˜Ú|¬7×£ïÑZoÚ°~0k™°Þ»ORÜ5ýðþ†9W‚”c [ 1437.873504][T19319] ûˆ=ÜĆQ²­uI‹Ç3ÂeJ?WTÛõÿÿ': -2 10:10:37 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x6000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1437.975304][T19319] overlayfs: failed to resolve './file0ð+•#™+nõ@—©t™Ý˜Ú|¬7×£ïÑZoÚ°~0k™°Þ»ORÜ5ýðþ†9W‚”c [ 1437.975304][T19319] ûˆ=ÜĆQ²­uI‹Ç3ÂeJ?WTÛõÿÿ': -2 10:10:37 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x1, 0x80) io_setup(0x200, &(0x7f0000000140)=0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0x0, 0x0, 0x100000}, {0x801, 0x0, 0x80000001}]}) accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000e00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000001000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7c0b917000000000000"]) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x2f) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r7}) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000e00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000001000080f2ffffff00"/192]) accept$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) io_submit(r4, 0x4, &(0x7f0000001740)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f0000000380)="28b331002efc5da67ec29d7cf255598d22ebfd9b740879e74471a27459f728632993305108d2ca0c98c85b29acde72fbc5232802bed08ea12bdfe7bdca03997e01e76980b68d88805a395e3fddc3459d95dd3287233e6ebc47ab7a6106b74162eabdbc0fd20ddcbcfed8e5a2e61305159fbc573244367477", 0x78, 0x8, 0x0, 0x2}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x6, 0x5, r3, &(0x7f0000000480)="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", 0x1000, 0x5, 0x0, 0x2, r6}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0xfff, r7, &(0x7f00000014c0)="ec1a1d6c85b258ec13ebacc3462af135a4b3182bc908c8e6861cbad48649564b252c5c7ac963502a8ddff6b4eb0e82890f8fb45f5f5a0109681bb3b056fc4cdf6ad23d0c307cd59c274e36fd1979e1070b8adc5deffb2e9e4a9a0f276b83dafc6df47210ea9c1a489da74830377afd3f258980148ec9e80f2c86dfa9bcc9b0cc27615cfc8db967378cba9d1e0205fd104de1f51d37816c39cc08c3f8bc", 0x9d, 0x80000001, 0x0, 0x1, r8}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x9, r9, &(0x7f0000001600)="282932ccdcb8a96b76efb6f57469dcc8e7dd8e06d002809ce0fcd057dc546778b7562a163f1c5065a1dbb272dd9a8420ca644260acc8e5f4ccf0b612c27f55b71e791fc38b31ee8ea0915c772fbe8fb0fc4c3f424c5258f7db9d527873b3e0ccf171f6f5608712cba47b7aa2dc2c8c9ff13015a79c144c076af17729dcb7653f3ea081bb95fb16a5aceb7d5f1544fcbbc497e638dcdc9573851d4302a7a96e441afc54f66873a563cf2a660c3bf769babb0b41c54e1bbfdb4c49dd342faad530daf42c2917cd4ccf9b5688caea5064661eefc48ce26e9749e609904a8d38", 0xde, 0x9, 0x0, 0x2, r10}]) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001780)='/dev/hwrng\x00', 0x80400, 0x0) ioctl$DRM_IOCTL_GET_STATS(r12, 0x80f86406, &(0x7f00000017c0)=""/121) ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r11, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1438.115700][T19535] overlayfs: failed to resolve './file1': -2 [ 1438.179374][T19536] overlayfs: missing 'lowerdir' 10:10:37 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:37 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) [ 1438.492827][T19658] overlayfs: missing 'lowerdir' [ 1438.599982][T19720] overlayfs: failed to resolve './file1': -2 10:10:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2f, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x7000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:38 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 10:10:38 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:38 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) fadvise64(r4, 0x10001, 0xda, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r6 = dup(r5) statx(r6, &(0x7f0000000140)='./bus\x00', 0x4000, 0x80, &(0x7f0000000480)) [ 1439.422584][T19759] xt_TCPMSS: Only works on TCP SYN packets [ 1439.446134][T19758] overlayfs: missing 'lowerdir' 10:10:38 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) [ 1439.510168][T19760] overlayfs: failed to resolve './file1': -2 10:10:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xa000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:39 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:39 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000140)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1439.794869][T19875] overlayfs: missing 'lowerdir' 10:10:39 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) 10:10:39 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) quotactl(0xff, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000540)="093656b075f87df96152b2142730977012c88a051e62fc9554c10aeed7b453365daa613116f50e7358b79371755e7d884d7bec437b3dd07fb02860acd081042b9d357a8716e8670e95dd596ca4d18ad7dab97e633045a0cc0ac51b5f21ea34b355317e4f3e119083666e8273307b675d77d8e47d018cec6c402379f8b698bcfb3bdb41d634818ea2031b3b397a9d8fba7383ea7b930362a8343a015f89de6eaa0a1510dcfff2a9668d74efccf0d29b401977d57cc7c9291bf7d06bece9c9c24b84e748d1a126b512df937e04c87b8117") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x22c, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001bffffff00004000632f77fbac141411e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1880425181aa5", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0xb, 0x40}, &(0x7f0000000380)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="738602000000ee000000000000b322d7f018dace000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x43, &(0x7f00000002c0)=""/67, 0x41100, 0x2, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xf, 0x5, 0x1}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3}, 0x7e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r2, 0x4) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/autofs\x00', 0x200, 0x0) bind$bt_sco(r4, &(0x7f0000000680)={0x1f, @fixed={[], 0x11}}, 0x8) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1439.950004][T19955] overlayfs: failed to resolve './file1': -2 10:10:39 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1440.099781][T19987] overlayfs: missing 'lowerdir' [ 1440.161697][T19991] overlayfs: failed to resolve './file0': -2 [ 1440.291006][T19991] overlayfs: failed to resolve './file0': -2 10:10:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x33, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000001c0)={0x4d, 0x7f, 0x1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e00100000000323cf1b17987768643890372e800000000000000000000000000000000000000000041e503fa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108e5ac660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db06abffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000009425000000000000899d7a9c5111756c"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:40 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) 10:10:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x20000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:40 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', r1}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:40 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:40 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1440.999152][T20005] overlayfs: missing 'lowerdir' [ 1441.013942][T20008] xt_TCPMSS: Only works on TCP SYN packets 10:10:40 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) 10:10:40 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1441.105413][T20007] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x40000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:40 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1441.191456][T20007] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:40 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='bpf\x00', 0x1000000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60}, 0x60) r1 = dup(r0) read$FUSE(r1, 0x0, 0x23) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f7765040000003d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530cacf7bb7e4cbd2278585"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1441.419152][T20131] overlayfs: missing 'lowerdir' [ 1441.669268][T20238] overlayfs: unrecognized mount option "lowe" or missing value 10:10:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x3a, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:41 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) mq_timedreceive(r0, &(0x7f0000000140)=""/50, 0x32, 0xff, &(0x7f00000000c0)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x1, 0x80) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f00000001c0)="dcf04d4ae58a254d1d4f46a50ca6b8cd13fd24a96d6f744b3112397f952922b6999ec357929296760244b0456ec8d31b483d49cf742473fc62aff297d038190b84c1cec9175899a9871b4bbaa60b14001f2c427e46d2a70dd8ec6abc6ab8d9eb65308b5d32c86d977bc9659fe9e9edb228d3c8b3fe0c4ddd2c1454e3d777d0ead90c0e5a13be90d75b09eb407b52c03378c77368bf0b42b20c155c9c4d93142fa4988238c592901b4f50d4d37fed416ba7") accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x104080, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, 0xfffffffffffffffe) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:41 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:41 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) 10:10:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x48000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1442.320257][T20248] xt_TCPMSS: Only works on TCP SYN packets [ 1442.351117][T20253] overlayfs: unrecognized mount option "lowe" or missing value [ 1442.367954][T20251] overlayfs: missing 'lowerdir' 10:10:41 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) 10:10:41 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') open$dir(&(0x7f0000000080)='./bus/file0\x00', 0x110000, 0x112) 10:10:41 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x4c000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:42 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x10d000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000440)={0x34011b8b02f77f28, 0x5, 0x6, r5, 0x0, &(0x7f0000000300)={0x990a66, 0x1000, [], @p_u16=&(0x7f00000002c0)=0x20}}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f0000000500)={r7, &(0x7f0000000880)=""/79}) r8 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xaa2e, @local, 0x8}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, [], 0xe}, 0x9ed}, @in6={0xa, 0x4e24, 0x7fffffff, @remote, 0x2}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xc2aa}, @in6={0xa, 0x4e22, 0x56ba7f12, @ipv4={[], [], @rand_addr=0x401}, 0xfffffe00}, @in={0x2, 0x4e23, @rand_addr=0xae28}], 0xdc) r9 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) accept$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) r10 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syncfs(r10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000140)=0xc) [ 1442.717372][T20471] overlayfs: missing 'lowerdir' 10:10:42 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) [ 1442.779510][T20472] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1442.863469][T20472] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:42 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1442.957884][T20586] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1442.976516][T20586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:10:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:42 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000000c0)={0x2, &(0x7f0000000080)="3e255d89c8c2ade902923f3c459695a6c0f7c911c1c996"}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c757070757264690a6929dc484304166ed7607cfbec40723d2e2f66696c65301512967246946878896a55f493d41d1516f64857f55f992dea97f9ee90f55b0352d459be661d193e814dc808050f9f0048165d3103447d88affaae6936c10291771525b72c7fd66a69d1ecdc02146c4df988b714ff570ebed54caf6570727b080e1438d24a90dee7d1be6d63df12ed64c829229ecc4c9cc9b5c24336024949c3002104bf76ad52c0e23e04c4f620800f6441f278a46bae54a4f2476edc587966f521fc82d48aedf45d88e744d2c8fb74efcc13884ecfe1475ba5253dbfa38d53c3e5dd494b7d5b503488df540c08aa9c660ce58299ce99556c17fb8353234085a08af826d2064dabfa00d16e5cf913c181d754b1358ed242a0b15b19b7899e"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:42 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) 10:10:42 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x8) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='w\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fedbdf25020000000a000900000000000000000005002d0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004886}, 0x40810) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x1e) 10:10:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x60000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:42 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1443.589251][T20705] xt_TCPMSS: Only works on TCP SYN packets [ 1443.610660][T20706] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1443.626871][T20706] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1443.649806][T20708] overlayfs: unrecognized mount option "uppurdi [ 1443.649806][T20708] i)ÜHCn×`|ûì@r=./file0–rF”hx‰jUô“ÔöHWõ_™-ê—ùîõ[RÔY¾f>MÈŸ" or missing value 10:10:43 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) 10:10:43 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x68000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1443.752336][T20816] overlayfs: unrecognized mount option "uppurdi [ 1443.752336][T20816] i)ÜHCn×`|ûì@r=./file0–rF”hx‰jUô“ÔöHWõ_™-ê—ùîõ[RÔY¾f>MÈŸ" or missing value 10:10:43 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000001c0)={0xc7, 0x293, &(0x7f0000000380)="3252578a16511f9e699f0266e34e226c4a2b822b84f4f9541558cf98f9f59210af93d187feb226b51283a6f9cee2dbbd8967d442d662c0a7c941b54ef47373dd8fc60f7baf70702c3291cd5df432d8af094be2fe605dcb82", &(0x7f0000000140)="11477711df3061a776bca7b3f109368ea85243ffd48b97d98bb024111e0471e7c1397e431b55dbadb1", 0x58, 0x29}) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:43 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65316c65309cb6399d4615e4d9b73dbe3d8b41e135a924fc2248a48fd5844882c6d1d3381f6860c6a3b1162bd45a300d71e04a2ec03d64a36ca62be6eeed3e2220a8591dd63d0fc904bb70a6b72e8e31849b2b78b3cf91f89bb6e1323729772a54"]) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000340)={r2, 0x2}) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1443.983787][T20824] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1444.076756][T20824] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:10:43 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) [ 1444.128542][T20925] overlayfs: option "workdir=./file1le0œ¶9FäÙ·=¾=‹Aá5©$ü"H¤Õ„H‚ÆÑÓ8h`Æ£±+ÔZ0 qàJ.À=d£l¦+æîí>" ¨YÖ=É»p¦·.Ž1„›+x³Ï‘ø›¶á27)w*T" is useless in a non-upper mount, ignore [ 1444.204972][T20940] overlayfs: unrecognized mount option "upper" or missing value [ 1444.210681][T20925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1444.248417][T20925] overlayfs: unrecognized mount option "" or missing value 10:10:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x76, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:44 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r0, r1+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:44 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) 10:10:44 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x0, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000600)={r3, @in={{0x2, 0x0, @loopback}}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x7, 0x10}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:44 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x6c000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1444.943968][T20957] xt_TCPMSS: Only works on TCP SYN packets [ 1444.969793][T20955] overlayfs: failed to resolve './file0': -2 10:10:44 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1445.001839][T20958] overlayfs: unrecognized mount option "upper" or missing value [ 1445.035384][T20953] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:44 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000140)) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r4, r5+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, 0x0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, 0x0) bind$l2tp(r8, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x74000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:44 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) [ 1445.157193][T21066] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1445.233387][T21070] overlayfs: failed to resolve './file0': -2 10:10:44 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:44 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x20) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1445.380193][T21121] overlayfs: unrecognized mount option "upper" or missing value [ 1445.469775][T21187] overlayfs: failed to resolve './file0': -2 [ 1445.657377][T21191] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1445.674647][T21191] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:45 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) mq_timedreceive(r0, &(0x7f0000000040)=""/41, 0x29, 0x0, &(0x7f00000000c0)={0x77359400}) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x1) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00'}, &(0x7f00000001c0)=0x44) socket$pppl2tp(0x18, 0x1, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000004c0)={0x1, 0xc, 0x4, 0x40000, 0x1000, {r3, r4/1000+30000}, {0x4, 0x8, 0xfe, 0x4, 0xfd, 0x0, "63cf7270"}, 0x9, 0x1, @offset=0x7, 0x3, 0x0, r1}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000540)={[{0xffffffff, 0x0, 0x0, 0x0, 0x80, 0x2, 0x20, 0x40, 0x1, 0xff, 0x9, 0x6, 0x101}, {0x28, 0x6, 0x4, 0x3, 0x80, 0x0, 0x9, 0x9d, 0xff, 0x1, 0xad, 0x0, 0xfff}, {0x7, 0x947, 0x6, 0x9, 0x6, 0x7, 0x1, 0x7, 0x20, 0x2f, 0x8, 0x5, 0x3}], 0xffff}) r6 = creat(&(0x7f0000000600)='./bus\x00', 0x6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:45 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:45 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) 10:10:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x7a000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:45 executing program 5: prctl$PR_GET_FP_MODE(0x2e) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1446.190960][T21200] xt_TCPMSS: Only works on TCP SYN packets [ 1446.214101][T21196] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1446.233627][T21204] overlayfs: workdir and upperdir must be separate subtrees 10:10:45 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) [ 1446.246477][T21202] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:45 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000380)='\x00\x00N\x00\x00\x00\xa0\x15\x8b\x9d\x06\xa2\x00\x00\xa0\t\x00\x00\x00\x00\x00\x00\x00\x83\xa9~IU\rsS\xd1\xb9\xf5/\xf8\xb9\x867\x90\xee\xe8j@\xec8\xce\x8e^o\xef\x16\xe7\x98E\x17-\xec6\xcac\xfd\x9bv\x95\x04\xc1\x19j1\xab7\"\x9a\x80[\xe0\x163m\xb00\x7f6K\x85S\x7f\x16\xc7\xf9\xb1\xd8\xa6Bw\xe1f\xea\t\xfd\x9du\x99T\x84\x91\xdb\xdf\x15\x00\tM9\xd36\x9f\xcc\xf6\x17') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:45 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1446.332521][T21270] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xa000a000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:45 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c696c6530da13317118b1b04b96adfdb9aaefd78f3c816626a882002eb5e570541a1cfae2ec863eb0ac4901c8b026cdad500acf49f2db2e99ead8b28ec01ce07047a62daa289c6c2f9a61899811c34f7115f0d34aa2c96b940322c8e6ce84ebbf1598eb434fbb0630d398094fad7029f4000000000000cb8b5c376cb26d4ceda6bb796ff8058587d80cea9124cb2a3bd863cbee533d03cef296c6ee0a7f679e861830473f9a5446ba064ae1507591004a694676b9128bbdab9191ab29955481af59937eecf1dcfeb8ef01a58ea32d71d3364dc4801649fa48"]) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote, @remote, 0x1, @default}, &(0x7f00000000c0)=0x1c, 0x800) sendto(r0, &(0x7f0000000600)="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", 0x1000, 0x84, &(0x7f0000000340)=@caif, 0x80) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1446.483796][T21317] overlayfs: workdir and upperdir must be separate subtrees 10:10:45 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) [ 1446.555468][T21324] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1446.701392][T21431] overlayfs: option "workdir=./filile0Ú1q±°K–­ý¹ªï×0x0, 0x0}) iopl(0x6) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) lstat(&(0x7f0000000600)='./bus/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$exfat(&(0x7f0000000380)='exfat\x00', &(0x7f00000003c0)='./bus\x00', 0x6, 0x3, &(0x7f0000000580)=[{&(0x7f0000000480)="7a7d415be0155b78c24f", 0xa, 0x7}, {&(0x7f00000004c0)="dd27ee3aba2edb4da61bf48cc364255d804a47dfd3453b8161cb5c36638fa9ad6a7be4a432c0e726adb8a607d8c64480e87ddc2e78bb780f36f343cfd17151a9bb680160fdb9a7fa97852af7b79dcbcd8fef2d93", 0x54, 0xd3}, {&(0x7f0000000540), 0x0, 0x20}], 0x3818020, &(0x7f00000006c0)={[{@codepage={'codepage', 0x3d, 'koi8-u'}}, {@namecase='namecase=1'}, {@gid={'gid', 0x3d, r4}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@errors_remount='errors=remount-ro'}]}) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) mount(&(0x7f0000000100)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='qnx6\x00', 0x1000, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r5 = socket(0x3, 0x5, 0xfb) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000780)=0x4) 10:10:46 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:46 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) 10:10:46 executing program 5: mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x4) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') setxattr$trusted_overlay_upper(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x83, 0x7, 0x6, "8360454bc781739c5e843bb3fe6eb20e", "ee76782b884d165ec8c433ed4ec141505c0a91b52299a5bd42b3b39beb6f3426fc586ea6a2eba8ef0b4a68df91a3ca006dd8a63a8b81f0efa702670a262e32453ab416b9c188e06e9ff886b09faf6ec5fa0a46af3510d19eedfa67ae419d308337acc3097b282bf3fc6f6525a0c9"}, 0x83, 0x2) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1dcd}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="51c44d19acd5736bba9f9440f92800a289630ed457b063406757b0061671b93fdc511d89e18bf720161013931494492965936a931bdf9bd86023903f4db07c197e85f3000000", @ANYRES16=r2, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000380)=0x4) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc0010000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1447.370443][T21447] xt_TCPMSS: Only works on TCP SYN packets [ 1447.388440][T21444] overlayfs: failed to resolve './file1': -2 [ 1447.390941][T21450] overlayfs: failed to resolve './fil': -2 [ 1447.426738][T21449] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1447.464783][T21507] overlayfs: failed to resolve './file1': -2 10:10:46 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) 10:10:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc8000000, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:46 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:46 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus/file0\x00', 0x2000, 0xc) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:47 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x400006}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1447.679552][T21668] overlayfs: failed to resolve './fil': -2 10:10:47 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) [ 1447.789028][T21727] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1447.871409][T21778] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1447.894047][T21781] overlayfs: failed to resolve './fil': -2 10:10:47 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) 10:10:47 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:47 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f627500000000726b6469723d2e2f66696c65312c75707065726469723d2e2f66796c65302d1422062940c74fee10340ea47bcfded3d9812e2906004147007c000078b7be211bda4ade0657123220e580653815f6bc25ff7d0b6bb65d8b536463e04ee5b226fbd6a5dfa357610fbc05dcc258c320"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:47 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$FUSE_WRITE(r1, &(0x7f0000000140)={0x18, 0x0, 0x8, {0x6}}, 0x18) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r3, r4+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0xff, @rand_addr="47a57b5cfd446f1d876a26b68eaa6ae6", 0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}, 0x5}, @in6={0xa, 0x4e23, 0xffffffff, @rand_addr="e460a1dd024c019e728c15f11304099b", 0x101}, @in6={0xa, 0x4e21, 0x6, @remote, 0x5}, @in6={0xa, 0x4e20, 0x1, @remote, 0x5}], 0xbc) socket$inet(0x2, 0x1, 0x80) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x3, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xffffffff, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1448.587461][T21797] xt_TCPMSS: Only works on TCP SYN packets [ 1448.604939][T21799] overlayfs: failed to resolve './file': -2 [ 1448.612601][T21798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:10:48 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1448.676370][T21798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:10:48 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) 10:10:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:10:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:48 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000004c0)=@pppol2tpv3, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, &(0x7f0000000440)=""/121, 0x79}, 0x101) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f7765726491ffffffffffffffff732c77f2e233b1fc0bbd60ab998e6f726b6469ff03182f66636e65312c752e2f66696c6530"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1448.908361][T21919] overlayfs: failed to resolve './file': -2 10:10:48 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:48 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) [ 1449.032191][T21997] overlayfs: unrecognized mount option "lowerd‘ÿÿÿÿÿÿÿÿs" or missing value 10:10:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x8, 0xb, 0x4, 0x40, 0xfffffffc, {0x0, 0x7530}, {0x3, 0x1, 0x80, 0xd1, 0x80, 0xe1, "6f1ab4a4"}, 0xec, 0x2, @planes=&(0x7f0000000140)={0x7, 0x80000001, @fd=r1, 0x3}, 0x700, 0x0, r2}) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000240)="06ab0d69b6910a47310012766bc78ed832ea49a483d1b8f9dc3c74e8c1857909abc5", 0x22) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r4, r5+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1449.089586][T21997] overlayfs: unrecognized mount option "lowerd‘ÿÿÿÿÿÿÿÿs" or missing value [ 1449.124722][T22033] overlayfs: failed to resolve './file': -2 10:10:48 executing program 5: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000007c0)={0x101, 0x4, 0xff, 0x0, 0x1000, 0x83, 0x100, 0xff, 0x1, 0xf9, 0x4, 0x7, 0xffc1, 0x2, &(0x7f0000000700)=""/160, 0x7ff, 0x9, 0x400}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000840)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r1 = getuid() mount$bpf(0x0, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)='bpf\x00', 0x301000, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xeb}}], [{@smackfsroot={'smackfsroot'}}, {@uid_eq={'uid', 0x3d, r1}}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x800404, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r5}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000900)=0x4) r6 = creat(&(0x7f0000000940)='./file1\x00', 0x5a) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000980)=0x7, 0x4) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:48 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1449.422351][T22046] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1449.498679][T22050] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x4, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:49 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:49 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file2\x00', 0x800, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="96933e047b11f00e9c086fbcd6bf93797158b77a186cf49bb46e44b91313069836e454ce7a81e702e261", 0x2a, 0xfffffffffffffc01}], 0x40000, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x30, 0x38]}}}}, {@huge_advise={'huge=advise', 0x3d, 'bpf\x00'}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x78]}}, {@mode={'mode', 0x3d, 0x2}}, {@huge_never={'huge=never', 0x3d, 'bpf\x00'}}, {@gid={'gid'}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x158d627e7ad9c7f5, 0x67]}}, {@huge_advise={'huge=advise', 0x3d, '%!vmnet1)em0)ppp1]/\xf1'}}, {@uid={'uid', 0x3d, r1}}], [{@smackfsroot={'smackfsroot', 0x3d, 'nodev-'}}]}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:49 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1450.234732][T22061] xt_TCPMSS: Only works on TCP SYN packets 10:10:49 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1450.341341][T22067] overlayfs: unrecognized mount option "wo=./file1" or missing value 10:10:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:49 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1450.459176][T22067] overlayfs: unrecognized mount option "wo=./file1" or missing value 10:10:49 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6ff7653cf508726469723d2e2f6235732c776f726b64707065726069723d2e2f66696c6530"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:49 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1450.773311][T22270] overlayfs: missing 'lowerdir' [ 1450.783092][T22271] overlayfs: unrecognized mount option "lo÷e<õrdir=./b5s" or missing value 10:10:50 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1450.864075][T22271] overlayfs: unrecognized mount option "lo÷e<õrdir=./b5s" or missing value 10:10:50 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1451.266111][T22297] overlayfs: missing 'lowerdir' 10:10:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x5, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0x258, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:51 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:51 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000e00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b9fb96658b591500000000000000000000000000000000000000000000000000000001080000000000000100008000"/199]) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) pidfd_getfd(r1, r2, 0x0) accept$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0xfffffee7) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r3}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000a00)={0x10001, 0x9, 0x4, 0x10, 0x3, {0x0, 0x7530}, {0x5, 0xc, 0x80, 0xb, 0x43, 0x28, "f3b6fe19"}, 0x5, 0x4, @offset=0x1, 0x6, 0x0, r3}) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r5}) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r7) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000240)='fuse\x00', 0x2208412, &(0x7f00000004c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}}) recvfrom$l2tp6(r4, &(0x7f0000000a80)=""/133, 0x85, 0x40000000, 0x0, 0x0) r9 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r9}) ioctl$TIOCGPTLCK(r9, 0x80045439, &(0x7f00000000c0)) r10 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000b40)={0x0, 0x0, 0x5, 0x0, [], [{}, {0x801, 0x0, 0x80000001}], [[], [], [], [], []]}) accept$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$KDSKBMETA(r10, 0x4b63, &(0x7f0000000080)=0x3) mkdir(&(0x7f0000000040)='./bus\x00', 0x90) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:51 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1452.135437][T22306] xt_TCPMSS: Only works on TCP SYN packets [ 1452.228837][T22314] overlayfs: missing 'lowerdir' 10:10:51 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nvme-fabrics\x00', 0x65c0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@rand_addr=0x1, @in=@multicast1, 0x4e20, 0x5, 0x4e23, 0x4, 0x2, 0x0, 0x20, 0x2b, 0x0, r1}, {0x4, 0xfffffffffffffffc, 0x2, 0x7, 0x7, 0x3f, 0x0, 0x1f}, {0x400, 0x7, 0x8, 0x7}, 0x700000, 0x6e6bbb, 0x0, 0x0, 0x1, 0x6}, {{@in6=@remote, 0x4d3, 0x5f}, 0xba116add80725094, @in=@multicast2, 0x3506, 0x0, 0x2, 0x9, 0x3ff, 0x8, 0x1}}, 0xe8) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') ioperm(0xe6, 0x5bf, 0x5) 10:10:51 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:51 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:51 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1452.462114][T22419] overlayfs: missing 'lowerdir' [ 1452.481275][T22421] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:52 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1452.575071][T22425] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:52 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000000c0)="b503894e0eb715ad376278d970577b3f343c6ee2da35c2effc507d0fcd2b6a880b435f0e5b7df725aad99d", 0x2b}, {&(0x7f0000000440)="26d0bbdb6528c0dd48da69345169800f9bac4d1140ee88a5d4569ee7e226306b828b7aa5625852be706958e26a40988b75c16392a56b5c844eb135cbe5a01efe678554621e5b362cb2a2bd47351fb63ea949ac7a3dd87a0cfd6e040db9cc62a07418e055e47a0dff5e5ec5965e038dd6cfe89ee6f8ffe56ffb12b8a2c3df751a3bc1583818dcd4abea2850adf29d6032f7f70b3a3c2a1161fb6625a5638472e4986c6dfd7e9a7187c2f023c6f8b9ab6fdca731057e19825ad707c4cbb47ef73da5c963b530907a7766fc1db75a23f0b5a333ce76172a43854b04ef8729cc9c3a525189fb98", 0xe5}, {&(0x7f0000000540)="c65633864fe726ab28f76afdf633660f82be61a71f69cc9f242945b0d079cbf006eec7737b553c11465cab45bcce9fccbce73fa6f1ac37adbad9e557158fb874d7c432b0a2d9fcdbce48d58c3fe9c75e3fc7b00ba4b0877ea9d6fddb70d0493fa9a36580637a187a4ee6fba00828fed2589837e8e826b55227ad6947ddb92476a0ea599bff2164e9ece8152dd32eea884e6b66c35e94c84a2d6ee6e47dd5513e5375646d7e1b5436f400832f591571d5173bf030ab56b510c4b317cc732901f76601e02ae2949b7c80541561c5d4e9eb05e724", 0xd3}, {&(0x7f0000000140)="daf24258c48b511f9a408dda33ac5baf0f45093360b8699855f88fb3a814608478a47054e15c6aff209be0f9d91b7d8b56f32d385e90", 0x36}, {&(0x7f0000000340)="c2d730158722000660422eafe942bdab21c458b457351fd071992044dfa8be9a0a0aab3619e9ef4b4815f4425da0dffaed43050a551458ce4dd870dd6fa62346cd210f27aa891230781b0284436e191f894d3b172e1a71dcf207b5195ce9cc4e4064547d03f4a4603e4b0ac261c9c80547adc1cc8851", 0x76}, {&(0x7f0000000640)="fe74bea935665ef8cd3fd23cc12f8de674668d778626ec5af2a64dd003f71f3d0b91008c50d95aa0f089414a0e9d19bcbb4962a28b90412377d583264f61945e5a712e55a4ee35fe666b0f99f6443410", 0x50}], 0x6}, 0x20000004) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1452.711769][T22429] overlayfs: missing 'lowerdir' 10:10:52 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1452.965005][T22434] overlayfs: missing 'lowerdir' [ 1453.057978][T22438] overlayfs: failed to resolve './file0': -2 [ 1453.103426][T22439] overlayfs: failed to resolve './file0': -2 10:10:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x6, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:52 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:52 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:52 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x60) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1453.461577][T22449] xt_TCPMSS: Only works on TCP SYN packets [ 1453.512706][T22451] overlayfs: missing 'lowerdir' [ 1453.530126][T22450] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:53 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:53 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1453.610161][T22450] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:53 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1453.813652][T22562] overlayfs: missing 'lowerdir' 10:10:53 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:53 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1453.981419][T22634] overlayfs: failed to resolve './file1': -2 [ 1454.035382][T22673] overlayfs: failed to resolve './file1': -2 [ 1454.081572][T22675] overlayfs: missing 'lowerdir' 10:10:53 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1454.183099][T22681] overlayfs: failed to resolve './file0': -2 [ 1454.426443][T22685] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1454.450724][T22685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:10:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x7, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:54 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x258, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:54 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000440)={0x5856, [0x8, 0x401, 0xffffffc0], [{0x7, 0x2, 0x1, 0x1, 0x1}, {0x400, 0x7, 0x0, 0x1, 0x1}, {0x5, 0x8, 0x1}, {0x5, 0x89, 0x1, 0x0, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x9}, {0x5, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x80000000, 0x1, 0x1, 0x1}, {0x101, 0x101, 0x1, 0x1}, {0x800, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x140000, 0x20, 0x0, 0x0, 0x0, 0x1}], 0x6}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r1 = open(&(0x7f0000000080)='./file2\x00', 0x800, 0x173) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000340)={0x0, @reserved}) 10:10:54 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1455.174151][T22693] xt_TCPMSS: Only works on TCP SYN packets [ 1455.236092][T22727] overlayfs: failed to resolve './file0': -2 [ 1455.273074][T22710] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1455.297906][T22710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1455.306215][T22695] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:10:54 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1455.361135][T22802] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:54 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f7765726469723d4e8b2e2f6255732c776f726b6469723d2e2f66696c65d4312c75707065726469723d2e2f66696c65"]) rmdir(&(0x7f0000000200)='./file1\x00') open(&(0x7f0000000080)='./file0\x00', 0x402101, 0x2) 10:10:54 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1455.545573][T22809] overlayfs: failed to resolve './file0': -2 10:10:55 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1455.684990][T22911] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1455.738736][T22911] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1455.759384][T22915] overlayfs: failed to resolve './file': -2 10:10:55 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:55 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1455.807430][T22915] overlayfs: failed to resolve './file': -2 [ 1456.074190][T22922] overlayfs: unrecognized mount option "upper" or missing value 10:10:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x8, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:56 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) sendmsg(r1, &(0x7f0000003700)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000340)="430a336df7659b653cdab10cca83b976e52ce89c0488a8325a6f8ce001a4f6e4ed541470db0d14560f5fee9af09b764ea50879df5592e41d3dab7a071b13f75389ed48d04cee3706158ed531fcfa770a7ebac27e0362332543cb3d5e9ecb6df31916c6bc71631debbcfcbf76b64fa7b4eb964bcb792ff7e83e1b7c5f25fa0b6960b8725d0abaee3af2af17ada9e2cb24769c041c2187ed884be7831ae3160484a6de11152300d9c4", 0xa8}, {&(0x7f0000000140)="3da2003720fe52ac15d535a15e1a1f82", 0x10}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000400)="39ccc6e75b6ea7b2fe4189cb1022c11ef91e9976f8b8a44e2fc4b070a330fcc3b3196338f0a5fb7cce308b4ddcebb6797451ceafd22e133402050fc853802ce0aee66d1cef9c0d6180809a50661345f3f042187af22187ca8b6ca2c15c7ee5c354347cc7e71b9c512be3bb8af2ba19cedf826765112ed31428ee4e6f824ea74f481f6b8e92ffe271701a46a875c28e14e8e703cd1322aa5f5c24fbccbebe364a1f737f7ce3b7", 0xa6}, {&(0x7f0000000240)="d89ff14d0e90a0f895da9e4c8e60965157ae6f37d9bba8e52fef333a7978ccf78f45b4f335", 0x25}, {&(0x7f0000002600)="0657e0e518446dc2fc304d1c4e878cb29ec87f6dfd334d34af2165ed5133a651beca77736af3d15297ef41761012e5b979092dc56d1c9cbb3671638877f1e0f8e4312a6497a37138088f60b412b76df5d59347b70f6b29ae13dd679f48db44caddb06b9978be3ddaee33728673cc917cf019d3b381c4fc66ab17001367e1ed3e86c72f47c83ce5951fa0e51d8d4d5edc798328754a646d807ad0dd5474f7d0de4fe8146a6ab927dc80cd91103601a1af13062200146b7e6ceebd3479d532bfc27147d15792940988591a9ca137aee239ab4d4f0ee48b6156653b1ae13043cca06f20af6852301e819b5c2bbd7f8228bb225dff246da9f0e02e0744e3acfc3c3266c5ac228d7c440aff5b9b537d26950e5e159dfc5e5c4ef90c25c4c9091df4af4b1073d58bf498e6e5c3e51ad8277ab2f6103295e84c6ce7a860c2685e54ba6e758aeadfe64ab184bb4cf4b898059ee09a03d71a6e2fb69507b0a4c540d87d0f8b6844c4d3e279a378cfa89ad6835b189053e7f2ee3f4f4cbaa948f199b6059ed46fc67591b6c75903135bed520e1bba046e229eef7b3a271eeab007deac467c76f07be11a99933131eb730e5137abe94288d8ba65e7885768cea97cc7b076f27ec3d85113496d837bb610b4a5b5e0a62f8d366d64f4158922a980afe62a9e245126407195ae16cdf9269899c6f397011c3608cb04a45c013d264fe5d74e61ab23886e2df882d1df2e9d89938bfb445c9ef458ac05feec5f51a8d05de1910f7d122c29c0a7bdb872f4d8e38300543c682ec7f42b6acc1a7185d711f3ab791f108c945dc0f67f9dc39618989c24073ae95ea8c56357b24241ca6f3f2a802d93a4387be8f05edcf1b2c654cdf34dcc8b1bd70bd541f8201628c5ddbcf9ce7cd519e208c651e6c091e63bfc1f58037e6f7ea8013533922d72fdca679cd2df3207ffeb2fd2ba4160b343b77e9ec2bf4ba11c10bda88a4c4448a70e988abbe99602889aad215178a3c1768bdb541d48582c660c51765a1510b0199b7cca789693f4676d5fd5ffaa4a89342907c70efc450718a77a9b8bd5032f919dd67b0c9096d2e7e931a072852c80dccece3785e778fe75b24588839876eec09c63165ec54abeb6a36f4cea400e864679ed49080cc4cbbaca613a0d4c08141eae0fb913c6ccf4ac89de30465c894eb6cdb1949176d434426d8cb9cb6ae660cccadafb45986139a0af0bcb52df9bbd429c65c2bd50163bf2bad578464cacd6fdd88a1dd610417cd62c4be061359007fcecabf89421492fcb2a159daf9e53a83a47fe657eacbeede40992e01c7e43b22d49bf1f34d87d13a203c34941eaf7f6bbf35c44df9b3c5a2d8454827b6dc5e8c076b633613f45ae93dc81a01090c7ef7c1fd3ccedd34ef700d6d2c70810dd69b32df6691d87b14df8d590fdc57be472a71fda0fa5ba43c27d09235cb6256934607c11e4cc443b80156fc2eb06590d83e9aa784bfe355d6a7c388b979ccc06fa6a77ac17bb14a6f0ed44daddb1df5598a9f0fa9c3033aae81de10bd2d0bc63d60d4446a880075dcd11e291aa35eab88a8bdc1d976bdfd78057cadcb9b24d3bc58f69536e8741ddbdd79507b7d050cbfb0eea6dc3a44f60934e1ee4961f04051ecad5bb0d1d2a4da9ab9e20764b2d50028dd3fd9fa30d4159bc6087d5932e3c173f52df9a8985e7a84b8dcef638cfc0847d9c89e99f616b224b1decb3a71edbaabc0fc04f91ac265832385a957a9c83eead9e32b001dd145e919ba3d387d122ae2b783f2cd06c42cda0020c05593583da341bc9c948508eb13927a84b3e262e272926be9ccef15c60d23bb1aea8fa6d1043f907cdce6346c41bc3911364a91b840fc5fe95945762c476ceafe5adac7c1f95e64125ae4f080d5e4d19d987fb688ac2b1b70999753ac290977c96a7d3ecf474e4bf533817da44b742830430616b94585a13a37ee3dd4d329d535f51283cfb61f27fb233d2ff936146e1f2f7dfd71274fb3375cf691a1b5eaf58f1e2281823cdd98fcfd3ea1ff9338acf66d2d47b06d03e678e15784283c64819533f7a8f08e11a4e2433eabf8757575820d5d48c0321e25f463ab59d5edd2196320053f4d982472c9760d328fc847d18bbcb0ba380db5996c7d24a0ddf89a6395271db7a5cf52adebed98e5a27d733e328849de8b024f43afda1c66330b4fd71ea35361cea1b866b9d370b4c89e526be2d1b6ee22e87fa2c680c1412d9a19c63a2a42c9997a3e391ec68e34e639b4996b7f68a16304c8c505eac609c01e3ee4adf546c6e10a99cc05dc3dd37b8ccb4f332bb11084d7086c98c987497efb4792e895d3de5543fd0a612d9dc4e5a86bd34ef2c5822a6730e0a3bc7dac2edd83b2393d14d7781026f9764a8795237fc698228ae45ff266813810fd731b830dcc43404518b5e07e3edd6d36eedf89a4da301cba07b3f1e713588d56511a8961d5f0e2971a1cf9aed8ea604969a49eb7cc1b7b5370572beaf3e544ac1ad7dd49ba4f363e91c0d3053d9f939d513a4c93f117ccd81adf2baafd4c46744c036a6b4a5291bf74521664dadddda5e0de9af4ea0b0180811e0d9f9dcd5fc4a5d637ec140bc38c99e5d90ccb9aa2e462073a3754470eb73c6dac410e30f6258abb0ef65a74ff0ed79654a4b155699ae3a11d6298c3a88058393983667388f4e203d09f37d629c2d29214b46775398efdf39b2b2458d933379c2f4193e663a693ba0c52935a3e29ba877b88db433b88acfe7213af115ab8e39d83932b97831d9e33ce2cf78002afc9a3a730a2767ba27b176707360c86566bc20b762f79055b74c3b2a37a00353f4dc77a110f0e8bca764a509ddff51060848b344962104756db1b5a79bd5b39ade4f283f983e0d2835e0a7b05e6a0bc6386522dd6fbb680eb217966b115964bc4710b6d4d4fef9f85203488efd0dc6fff084484348adf41790fc6bc6d0e4d3b06cfcea6321267335d0735ae8fbdafc88446d1f39e962817d785300fc4aaf97e1c6ee23cfeeeea2e8f0b3d3882249d0d38dd52a893e8513f760126bc6d39a776fbf226daf1ea105709a9aa92330b1ab7d0b0f58a84573e05fac01b8db4f16e731c0cc1066d7ab2acf1db89e3b0ebfec996cb1d8c445dd13e01827d1cb0f84d16a17fd4981d6f3163c0e109c0997c2abbb3b04e7abfad4b4ff2fbfa02be9a2e926a34b115f880809693105a6c1e86c902fab1783eab01b2caf966a527d450192235480c9b6b32e85acefbfe8b1101dfe61dfdd7590531a4ee45aee118475936f5c52966c06cb468fd6fcaab2e40e13250438872f27095dd35f09fa9965ed0b3637a1bf1e36d1eeb18ab2d9e8e887879a0ab6debb9aa1767135e34d47f58def3ee5a4529e7212e29c56901d1c3f0dc77d198fb9a8d3a4b356e6a82759872d4b65c718af3c78361c60720449c1ba6683b27f81a0fc678bf49e4fcefe196b63ecea751c699f2462f0a126801fa52e1fbf015bf89b912149e70d837bcea704e35dafd913d1fc24da9b77c21b2afdfa584a0dd6edab9580e90f82655c4c1a9086f95fd8e55c4f2e234d6da4de6872537176351c9f65402a9eee4273a4d2cad0f78b4e2bd823d0109fe3d3b67f7e8b8c6f5aac215d2cbafc6f2b5f5f902ca2b82a1047fafc1a5180b8bbd57596d15e84e43df8d519724ecefd5b9b462337d5e984116719e1af283f18f2197bc4ae0477653f123f805504b558d5641f3b678083bd3b227859df1e54d8af9fa6158bfea56098b6764bc7300e2e7bf14e6e26882d997184c52a468d7dd19daba9eaf0b55695f34b554b60f284252a34f06e6f0f919e3a341e7c6c031d8dff296fc229e615455f742fe23ba28987e46d1a79801cf0deb7a1c84a1b6a8010eccffe364e56ca4db3303daf3e5a3aa9ed93d7d486f0d094cfbaccf95b5ab422ee7f1d00066f4a4231776ae83d0595a103ad19a69743c16959a8f6e9afcb18d6c8bd602c430ed88fe425bbddb0e816eeb3c4ecdd504a9b1140c4c31fa6ae90f086676e6f2d353a7bd6cc82ffe4c54b556dbb043536fc4827cd639b212ad2d6d707c5cc4bcaf9be5615401331649ad95b44a1b0e6162b4978f86266bf4a0bb7e3de8253df241991a0bc9c0256cf6f726f2794f995270f7338cff5080db7cdfb54bd52edf9200a9641be76bc4d596d97daa5fdb5a48456a262cc2bec156a97c373d6b4e6ca565897193944eafd3806a593ff340dbd091e74048344188181aeb56c243afe3795c029b85cd13181f3ef0f3367d2782590d68416b27b49ecebb691560a5f982096405754474f3b6df5c3e6a8c13d4d1c1972d2372ca793d38762688643292d394cc663816bb5a0917ad115ffe44c382fd347f1363fbe398cd9d5c2b16675df17da4aa2e51e17b26fb427979f73ebc4ba8abdbc33daafb2de4f12e899c2119a6ca78a6ebf5dea0200625570c4197a6a9e159af049a541183601753abd2efb202f72a29ba4251abf9379477ae3423d137f82dc44a2e7b7991ca750282d449d2acbf3acf3b130a40e7b5b86ca57ef047525cf0a8fa7a8d8576c76998689f421c163a9fbbbe1740bac41191fef99d8f6f04e4bda15d23cb29ec91b8cdf5532a54a98bbae7f0dbbfa90dfb18fdd305d73a925bfc3599b3c21fc770f70c0addf10bc69dae76b786108c7aade70dbbc8afbce073028df918865cba7701250e5d2300077032eb732ac5b89cf7611ea4cf45ea3ae553ca51b2333ffbbfcfae101cfe28387869e95a4677c6e77e7147eb0453d4a6507abde719feb100eca6849861f90ecca29d5ffeeaa4597f0e4e5b4ec46dbb831b069f3c76753d3b2cb7a2b39827aa6adadee2ad46f601ec91f1763ed811bd870790eb3db69e83966410a37014bb0ad40b5bc571a6f69b67de1f3a595e848d261c83bd3c114cbc5394d315dd21cbc4f3f1e8d61a5e8bb09bb074ff4cb2aa407d78ff373b444dbcbf64cd102cd1b2bd51467dc7ad26f3e086e398efc07ea2c3b71a82fe74e02c30747adade49a824b6dca3056051811f86e55e5a64a65aa94b540bf7d4937a44d1d3141a2e4b27171c5255fc84218d6736303ae16a55019dfed099577333b76c5dd0b7d2b7e0e87f396386f7ff401ec55b5f2aa0b2d49d34807135d0bb4481fb0685a2d796b8910dd5ee1a65eff25c0db5805d1b0110ac36dad063dfc0c2b953e191f524c6bf815741504f814ea5e7c07e44e84e17a0f85bbaa7af59e246993a8edf89ee2c9c9626032b3ba1cf3d2f31c58ed8dd8a9aaed0f6b37fd71ef32c921480590ca8c67a782b57aeb36fa30ab17cc288ebef6774d865b65d90fd606e600f20b30410c23c64ad37a7a2b9798ce036e453dc6b4450a2fab58f1ac7f6289095ab0be62bb40a514f72e1d9be018f2113f63ce7805d39ff8703cd4bffdadf06965e4ef6c2f3f876bf85e3c7b5fbe43508e3751303bbca861bf1000759b7ecb743d7f908d6cd8f66378a9b81484ee3606a58f9b5a5bdb81301856fcc81a3122e9ccc4636bb80d5990b1e1fac8831550e65a47ca0835f684dfe58f0985ef878b8c83c9182296e33bc4e4b035f42eb9871f0e8f303c996057b8236b419d2f0e927bc3e04866e24af2094230198b428be6011fd50d1d930e07adc63a5e998e93be032a2256d75ec93ad9da940cfc5f9a7861112dea45b6d34360b466e3dffd62847fca98a2baf879f2f434085403e4466704ca1123942e8d3f9ebb4d882d060181076aaf5074c8fff6b76f601449c6efcc3f873ca463f8a4897776c06af05cf5e4b84b8d952c4a2190ee388fc93565e6", 0x1000}, {&(0x7f00000004c0)="6c33e3375ae38e438851af30a3990e46db0854fd57e87e7627ed7a470abcd4e3760d8d9456", 0x25}], 0x8, &(0x7f0000003680)=[{0x50, 0x10e, 0x1, "7ff5de27eefa48ad01e02c29913eb26badd163a10fd1715f440027626e189be9afbba667490545574c9ec6fbee9031e0bd72afc228ce7a276830a57e"}], 0x50}, 0x20000000) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c7570706572645c723d2e2f66696c6530fb0697d0aa9fbca4209d488c3f202f8f9c90448ddf81947e099679098fd0bd0449fdab91b06fc272f50796b48262e6fcadf4a80842bda95b3f435fea1bce0ae5a787e78f192d0202ceaab9000d39f20e331bfcb26589631092a3c04b8c93b3fd814f6c59f3bd42d888ebb4282ce42829b12174a4512f1a3da33e229e68e314812fcf3b9b5074934eec8b587d67e91f5288eb5c02784a6bfab96750dc263640774c8a1c6fa5"]) rmdir(&(0x7f00000037c0)='./bus/file0\x00') 10:10:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c8, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:56 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:56 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1456.746168][T22927] overlayfs: unrecognized mount option "upperd\r=./file0û—ЪŸ¼¤ HŒ? /œDß”~ –y нIý«‘°oÂrõ–´‚bæü­ô¨B½©[?C_êÎ [ 1456.746168][T22927] 姇ç-Ϊ¹" or missing value [ 1456.825428][T22940] overlayfs: unrecognized mount option "upper" or missing value 10:10:56 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x258, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1456.891857][T23042] overlayfs: unrecognized mount option "upperd\r=./file0û—ЪŸ¼¤ HŒ? /œDß”~ –y нIý«‘°oÂrõ–´‚bæü­ô¨B½©[?C_êÎ [ 1456.891857][T23042] 姇ç-Ϊ¹" or missing value 10:10:56 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:56 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f726b6469723d2e2f66696cc3ee8803d0786530000000000000000000000000000000a809c1d041de594c1b7f3f4fa45bd9874bebfbe67a1669847ac70c4aaa0a1655fe61b3ca495550fe89e15d37cda3b398337eb5147a157beaf9d7394649e041a58def2780719bfffbf36a3a6f91d1a48a02966f647e6968fd52fa0dcf0721653b1322c4cc185a4000000000ab465e372031c9e9b77d3cd2c263440e75a873bcdc7d1a2d00"/178]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:56 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1457.195718][T23056] overlayfs: unrecognized mount option "upper" or missing value 10:10:56 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1457.307652][T23154] overlayfs: failed to resolve './file1': -2 [ 1457.361484][T23156] overlayfs: unrecognized mount option "lorkdir=./filÃîˆÐxe0" or missing value 10:10:56 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1457.416441][T23156] overlayfs: unrecognized mount option "lorkdir=./filÃîˆÐxe0" or missing value [ 1457.602023][T23161] overlayfs: failed to resolve './file1': -2 [ 1457.729681][T23164] overlayfs: workdir and upperdir must be separate subtrees 10:10:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x10, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0xc8, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:57 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f00000000c0)='./file1\x00', 0x9, 0x1, &(0x7f0000000140)=[{&(0x7f0000000340)="e39702a4f03aecc1b668d552412d55e723670726d002e9475f3f39344cf3426416cde21f4e115a1adc23e92435a2637e7626a3f8996afe1ace9e3f8d357a7ab328ae8e745c70caf060702b7b269ba705a9ab5fcb", 0x54, 0x100}], 0x41448, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='security.capability\x00', &(0x7f0000000480)=@v2={0x2000000, [{0xfffffff8, 0x6}, {0x8, 0xfffffffa}]}, 0x14, 0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x690000, 0x100) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,udir=./fOle0\x00\x00\x00\x00']) write$P9_RREADDIR(r0, &(0x7f0000000240)={0x2a, 0x29, 0x1, {0x3, [{{0x40, 0x1, 0x1}, 0x6, 0x9, 0x7, './file1'}]}}, 0x2a) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:57 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:57 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1458.475514][T23174] xt_TCPMSS: Only works on TCP SYN packets [ 1458.494744][T23173] overlayfs: workdir and upperdir must be separate subtrees [ 1458.547939][T23176] overlayfs: failed to resolve './file1': -2 [ 1458.549369][T23175] overlayfs: unrecognized mount option "udir=./fOle0" or missing value 10:10:58 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1458.621305][T23282] overlayfs: unrecognized mount option "udir=./fOle0" or missing value 10:10:58 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:58 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x424040, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200040, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x898, 0x270, 0x0, 0x270, 0x270, 0x270, 0x7c8, 0x7c8, 0x7c8, 0x7c8, 0x7c8, 0x6, &(0x7f0000000340), {[{{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0xa59, 0x0, 0x1, [0x4, 0x5, 0x1, 0xaa65, 0x401, 0x1, 0x9, 0x800, 0xfff, 0x8, 0x7f, 0x4f, 0x6, 0x7, 0xc1, 0x9], 0x10}}, @common=@rt={{0x138, 'rt\x00'}, {0x3, [0x0, 0x200], 0x537, 0x8, 0x3, [@mcast1, @ipv4={[], [], @loopback}, @rand_addr="2d80b31503676903ab631e3d3413fc2b", @initdev={0xfe, 0x88, [], 0x2, 0x0}, @dev={0xfe, 0x80, [], 0x3d}, @empty, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @remote, @loopback, @mcast1], 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2a}, @ipv6=@local, 0x12, 0xd, 0x1000}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xff000000, 0xff000000, 0xffffff00, 0xff], [0xff, 0x0, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x6, 0x33, 0x2, 0x30}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x7, [0x9, 0x5], 0x6, 0x1, 0x6, [@mcast2, @rand_addr="b55096416246ae435349909b5f1f6616", @ipv4={[], [], @multicast1}, @empty, @local, @remote, @empty, @mcast1, @mcast2, @rand_addr="546993c00846e27c765bf3a6429aa88c", @loopback, @rand_addr="7f297cd9555513077e6608ad774fd6e8", @ipv4={[], [], @rand_addr=0x2}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @loopback], 0x3}}, @common=@frag={{0x30, 'frag\x00'}, {[0x6, 0x81], 0x55e9, 0x32, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x4}}}, {{@ipv6={@ipv4={[], [], @multicast2}, @mcast1, [0xffffffff, 0xff, 0x0, 0xff], [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 'syzkaller1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0xff, 0x9, 0x1, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@mh={{0x28, 'mh\x00'}, {"9f76"}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@multicast1, 0x35, 0x24, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x20, @ipv4=@empty, 0x4e24}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8f8) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1458.861358][T23288] overlayfs: workdir and upperdir must be separate subtrees [ 1458.886153][T23290] overlayfs: failed to resolve './file1': -2 10:10:58 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:58 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1458.975664][T23292] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1459.053046][T23292] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:58 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x80) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1459.131097][T23296] overlayfs: failed to resolve './file1': -2 10:10:58 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1459.344012][T23299] overlayfs: failed to resolve './fil': -2 [ 1459.386974][T23304] overlayfs: failed to resolve './file1': -2 [ 1459.426207][T23306] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1459.516367][T23309] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:10:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x11, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:10:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c8, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:10:59 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:59 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:59 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x2814008, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:10:59 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = gettid() sched_getparam(r0, &(0x7f0000000100)) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/nf_conntrack\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0xc4, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_PROBES={0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3f}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}]}, 0xc4}, 0x1, 0x0, 0x0, 0x12}, 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2eb189035db897768e6b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1459.960796][T23315] xt_TCPMSS: Only works on TCP SYN packets [ 1459.987007][T23318] overlayfs: failed to resolve './fil': -2 10:10:59 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:59 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x258, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1460.205028][T23426] overlayfs: missing 'workdir' 10:10:59 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1460.268581][T23426] overlayfs: missing 'workdir' [ 1460.278358][T23431] overlayfs: failed to resolve './fil': -2 10:10:59 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:10:59 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2fa64704c2b10ea09d95b76a0d6e3be50363fbdc67f6c0899d06314f4e5275824be0285cb795e3d41e25427d22aa63aa9b1c09305ef60649ce92dd60386174d7da1304993ac43cdc4513019b95ea755b1941ae47d7a94826eea4ae911d3ad0b298966a67caecf2ab6c5882ef59635d20b42a75dadd7160e59bfea448c54383dc1e9f66fc585468d7ef937415b708cb084af8f087f6d6d981ca5ab75beef593"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='overlay\x00', 0x30, &(0x7f0000000900)={[{@default_permissions='default_permissions'}], [{@uid_lt={'uid<', r3}}, {@subj_type={'subj_type', 0x3d, 'userlo[%eth0\\&$\\!%/vboxnet1'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, 'bpf\x00'}}, {@smackfsroot={'smackfsroot'}}, {@subj_type={'subj_type', 0x3d, 'syz'}}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@obj_type={'obj_type', 0x3d, 'selinux'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'bpf\x00'}}]}) close(r1) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x0, 0x13e4a38fd9ec3632, 0x4, 0x20, 0x6, {}, {0x7, 0x4, 0x9, 0x3, 0x0, 0x6, "8e993ae9"}, 0x81, 0x2, @userptr=0x7, 0x6, 0x0, r1}) r5 = gettid() sched_getparam(r5, &(0x7f0000000100)) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x6, 0x2, {r5}, {r7}, 0x9, 0x4}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000228bd7000ffdbdf25050000001508061b988c1136e28dc200ff01000000000000000000001f6ed42470c658ad00000001ba41145380449e024f34d1ec5eed5168b6d22b2985f34d3ba808e66cd84a3dee4902f25146bff90000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x30008004) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x8800) r9 = add_key(&(0x7f0000000400)='syzkaller\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)="bf0da804e582c65d217d7cd984a365165766a4ff9738be409ec09aff3581133a5d4538181a97a61b4bbc7a378ba2c8f1515215c8c87eb78a462b1a", 0x3b, 0xfffffffffffffff8) keyctl$describe(0x6, r9, &(0x7f0000000780)=""/211, 0xd3) [ 1460.530595][T23540] overlayfs: failed to resolve './file': -2 [ 1460.577735][T23542] overlayfs: failed to resolve './¦G± •·j n;åcûÜgöÀ‰1ONRu‚Kà(·•ãÔ%B}"ªcª› 0^öIÎ’Ý`8at×Ú™:Ä<ÜE›•êu[A®GשH&‘:в˜–jgÊìò«lX‚ïYc] ´*uÚÝq`å›þ¤HÅCƒÜŸfüXTh×ï“t·ËJøð‡öÖÙÊZ·[îõ“': -2 10:11:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x33, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:00 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x1c4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:00 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:00 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0xc8, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1461.663773][T23553] overlayfs: failed to resolve './file': -2 [ 1461.665048][T23557] xt_TCPMSS: Only works on TCP SYN packets [ 1461.687329][T23555] overlayfs: failed to resolve './file0': -2 [ 1461.708075][T23554] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:01 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1461.809753][T23554] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:01 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000340)=""/129, &(0x7f0000000080)=0x81) [ 1461.953432][T23664] overlayfs: failed to resolve './file0': -2 [ 1461.959201][T23663] overlayfs: failed to resolve './file': -2 10:11:01 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(0x0, 0x40) 10:11:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1462.147506][T23667] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1462.215970][T23667] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1462.235633][T23669] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:01 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(0x0, 0x40) [ 1462.306460][T23674] overlayfs: failed to resolve './file0': -2 10:11:01 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, 0x84) rmdir(&(0x7f0000000140)='./bus\x00') [ 1462.569283][T23678] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1462.630851][T23680] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1462.631452][T23678] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x38, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c8, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:02 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYRESDEC, @ANYRES16, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="92f836c6a918a9b026f6bd7a77932a4168d134478449094b40eafb99aad85e4c58eb8a9957a18bc3d88cc96c23b91c3a942d50272ce135c1e1d2eb5ef1840118cfe86fa253cbdcf02cfad8123119e3917e8f842600a6db2703ee662ac2c91adbb6b8d6e1fd3f39"]]]) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000038}, 0x300}], 0x4000000000000d0, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) accept(r1, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x0) getpid() r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:02 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(0x0, 0x40) [ 1463.268690][T23692] xt_TCPMSS: Only works on TCP SYN packets [ 1463.268972][T23694] overlayfs: missing 'lowerdir' [ 1463.328881][T23696] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:02 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x258, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1463.743833][T23807] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:03 executing program 1 (fault-call:6 fault-nth:0): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:03 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0xc8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1464.125630][T23694] overlayfs: missing 'lowerdir' 10:11:03 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10040, 0x0) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x86, 0x2, 0x2}, 0x4}}, 0x18) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000380)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x800000, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@version_u='version=9p2000.u'}, {@msize={'msize', 0x3d, 0x1f}}, {@uname={'uname', 0x3d, '/dev/btrfs-control\x00'}}], [{@smackfsroot={'smackfsroot', 0x3d, '{em1]@'}}, {@smackfsroot={'smackfsroot', 0x3d, '\xa6!*{GPLvmnet1vboxnet0user[-{*'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'eth0cpusetppp1*'}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type'}}, {@dont_measure='dont_measure'}]}}) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1464.270620][T23915] xt_TCPMSS: Only works on TCP SYN packets [ 1464.371424][T23916] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1464.443784][T23976] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1464.468311][T24026] FAULT_INJECTION: forcing a failure. [ 1464.468311][T24026] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.499686][T24027] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1464.526802][T24026] CPU: 0 PID: 24026 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1464.536823][T24026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.546892][T24026] Call Trace: [ 1464.550211][T24026] dump_stack+0x197/0x210 [ 1464.554570][T24026] should_fail.cold+0x5/0xf [ 1464.559096][T24026] ? setup_fault_attr+0x1f0/0x1f0 [ 1464.564151][T24026] ? ___might_sleep+0x163/0x2c0 [ 1464.569029][T24026] __should_failslab+0xb7/0x100 [ 1464.573896][T24026] should_failslab+0x9/0x14 [ 1464.578416][T24026] kmem_cache_alloc+0x2aa/0x710 [ 1464.583292][T24026] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1464.588611][T24026] ? wait_for_completion+0x440/0x440 [ 1464.593915][T24026] getname_flags+0xd6/0x5b0 [ 1464.598447][T24026] user_path_at_empty+0x2f/0x50 [ 1464.603320][T24026] do_fchmodat+0x9c/0x150 [ 1464.607667][T24026] ? __ia32_sys_fchmod+0x80/0x80 [ 1464.612731][T24026] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1464.618205][T24026] ? do_syscall_64+0x26/0x790 [ 1464.622896][T24026] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1464.628973][T24026] ? do_syscall_64+0x26/0x790 [ 1464.633660][T24026] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1464.638968][T24026] __x64_sys_chmod+0x5c/0x80 [ 1464.643574][T24026] do_syscall_64+0xfa/0x790 [ 1464.648099][T24026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1464.653999][T24026] RIP: 0033:0x45c6c9 [ 1464.657901][T24026] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1464.677508][T24026] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1464.685935][T24026] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1464.693915][T24026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1464.701897][T24026] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1464.709880][T24026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1464.717860][T24026] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000000 10:11:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:04 executing program 1 (fault-call:6 fault-nth:1): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:04 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3d1, 0x581180) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x7) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1465.324688][T24036] xt_TCPMSS: Only works on TCP SYN packets [ 1465.378972][T24035] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1465.393006][T24034] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1465.461570][T24035] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1465.477399][T24034] FAULT_INJECTION: forcing a failure. [ 1465.477399][T24034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.490722][T24034] CPU: 1 PID: 24034 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1465.500616][T24034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.510680][T24034] Call Trace: [ 1465.513991][T24034] dump_stack+0x197/0x210 [ 1465.518345][T24034] should_fail.cold+0x5/0xf [ 1465.522874][T24034] ? setup_fault_attr+0x1f0/0x1f0 [ 1465.527919][T24034] ? __kasan_check_read+0x11/0x20 [ 1465.532961][T24034] ? __lock_acquire+0x1af3/0x6320 [ 1465.538009][T24034] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1465.543744][T24034] ? kstrtouint+0x142/0x1a0 [ 1465.548393][T24034] should_fail_alloc_page+0x50/0x60 [ 1465.553837][T24034] __alloc_pages_nodemask+0x1a1/0x910 [ 1465.559329][T24034] ? fs_reclaim_release+0xf/0x30 [ 1465.564285][T24034] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1465.570119][T24034] ? fs_reclaim_release+0xf/0x30 [ 1465.575130][T24034] cache_grow_begin+0x90/0xc60 [ 1465.580029][T24034] ? trace_hardirqs_off+0x62/0x240 [ 1465.585174][T24034] kmem_cache_alloc+0x64e/0x710 [ 1465.590052][T24034] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1465.595474][T24034] getname_flags+0xd6/0x5b0 [ 1465.600126][T24034] user_path_at_empty+0x2f/0x50 [ 1465.604999][T24034] do_fchmodat+0x9c/0x150 [ 1465.609349][T24034] ? __ia32_sys_fchmod+0x80/0x80 [ 1465.614298][T24034] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1465.619952][T24034] ? do_syscall_64+0x26/0x790 [ 1465.624747][T24034] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1465.630824][T24034] ? do_syscall_64+0x26/0x790 [ 1465.635518][T24034] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1465.640826][T24034] __x64_sys_chmod+0x5c/0x80 [ 1465.645437][T24034] do_syscall_64+0xfa/0x790 [ 1465.650081][T24034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1465.655989][T24034] RIP: 0033:0x45c6c9 [ 1465.659900][T24034] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1465.679619][T24034] RSP: 002b:00007f03f8906c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1465.688049][T24034] RAX: ffffffffffffffda RBX: 00007f03f89076d4 RCX: 000000000045c6c9 [ 1465.696099][T24034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1465.704123][T24034] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 10:11:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1465.712121][T24034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1465.720111][T24034] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000001 10:11:05 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x122001, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x1}) 10:11:05 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:05 executing program 1 (fault-call:6 fault-nth:2): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:05 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1466.050070][T24218] overlayfs: unrecognized mount option "lTwerdir=./‘€Pº‰ dir=.^~Z˜erdir=./fil äW]" or missing value [ 1466.079068][T24242] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1466.112727][T24242] FAULT_INJECTION: forcing a failure. [ 1466.112727][T24242] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.134976][T24218] overlayfs: unrecognized mount option "lTwerdir=./‘€Pº‰ dir=.^~Z˜erdir=./fil äW]" or missing value [ 1466.162867][T24242] CPU: 1 PID: 24242 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1466.172799][T24242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.182865][T24242] Call Trace: [ 1466.186178][T24242] dump_stack+0x197/0x210 [ 1466.190535][T24242] should_fail.cold+0x5/0xf [ 1466.195088][T24242] ? setup_fault_attr+0x1f0/0x1f0 [ 1466.200141][T24242] ? ___might_sleep+0x163/0x2c0 [ 1466.205022][T24242] __should_failslab+0xb7/0x100 [ 1466.209891][T24242] should_failslab+0x9/0x14 [ 1466.214414][T24242] kmem_cache_alloc+0x2aa/0x710 [ 1466.219283][T24242] ? lock_downgrade+0x920/0x920 [ 1466.224170][T24242] __d_alloc+0x2e/0x8c0 [ 1466.228350][T24242] d_alloc+0x4d/0x280 [ 1466.232460][T24242] d_alloc_parallel+0xf4/0x1c00 [ 1466.237323][T24242] ? rcu_preempt_deferred_qs_irqrestore+0x68b/0xb60 [ 1466.244032][T24242] ? __kasan_check_read+0x11/0x20 [ 1466.249063][T24242] ? mark_lock+0xc2/0x1220 [ 1466.253511][T24242] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1466.258372][T24242] ? find_held_lock+0x35/0x130 [ 1466.263153][T24242] ? unlazy_walk+0x168/0x3b0 [ 1466.267757][T24242] ? lockdep_init_map+0x1be/0x6d0 [ 1466.272913][T24242] ? lockdep_init_map+0x1be/0x6d0 [ 1466.277965][T24242] __lookup_slow+0x1ab/0x4d0 [ 1466.282593][T24242] ? vfs_unlink+0x620/0x620 [ 1466.287156][T24242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1466.293422][T24242] ? security_inode_permission+0xcb/0x100 [ 1466.299183][T24242] walk_component+0x7ce/0x10b0 [ 1466.304012][T24242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1466.310283][T24242] ? follow_dotdot_rcu+0x1120/0x1120 [ 1466.315598][T24242] ? walk_component+0x10b0/0x10b0 [ 1466.320661][T24242] path_lookupat.isra.0+0x183/0x460 [ 1466.325884][T24242] filename_lookup+0x1a3/0x3e0 [ 1466.330676][T24242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1466.336935][T24242] ? nd_jump_link+0x360/0x360 [ 1466.341649][T24242] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1466.347919][T24242] ? __phys_addr_symbol+0x30/0x70 [ 1466.352958][T24242] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1466.358693][T24242] ? __check_object_size+0x3d/0x437 [ 1466.363924][T24242] ? strncpy_from_user+0x2d1/0x410 [ 1466.369066][T24242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1466.375325][T24242] ? getname_flags+0x277/0x5b0 [ 1466.380115][T24242] user_path_at_empty+0x43/0x50 [ 1466.385003][T24242] do_fchmodat+0x9c/0x150 [ 1466.389358][T24242] ? __ia32_sys_fchmod+0x80/0x80 [ 1466.394308][T24242] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1466.399795][T24242] ? do_syscall_64+0x26/0x790 [ 1466.404498][T24242] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1466.410693][T24242] ? do_syscall_64+0x26/0x790 [ 1466.415393][T24242] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1466.420712][T24242] __x64_sys_chmod+0x5c/0x80 [ 1466.425321][T24242] do_syscall_64+0xfa/0x790 [ 1466.429845][T24242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1466.435764][T24242] RIP: 0033:0x45c6c9 [ 1466.439671][T24242] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:11:05 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140), 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) [ 1466.459380][T24242] RSP: 002b:00007f03f8906c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1466.467833][T24242] RAX: ffffffffffffffda RBX: 00007f03f89076d4 RCX: 000000000045c6c9 [ 1466.475817][T24242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1466.483801][T24242] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1466.491787][T24242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1466.499772][T24242] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000002 [ 1466.629748][T24268] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1466.733722][T24268] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x2]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:06 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x2, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:06 executing program 1 (fault-call:6 fault-nth:3): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:06 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1467.494336][T24279] xt_TCPMSS: Only works on TCP SYN packets [ 1467.548189][T24287] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1467.560008][T24282] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1467.583550][T24333] FAULT_INJECTION: forcing a failure. [ 1467.583550][T24333] name failslab, interval 1, probability 0, space 0, times 0 10:11:07 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1467.601741][T24287] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1467.638105][T24333] CPU: 0 PID: 24333 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 10:11:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x4, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1467.648130][T24333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.658206][T24333] Call Trace: [ 1467.661526][T24333] dump_stack+0x197/0x210 [ 1467.665883][T24333] should_fail.cold+0x5/0xf [ 1467.670439][T24333] ? setup_fault_attr+0x1f0/0x1f0 [ 1467.675492][T24333] ? ___might_sleep+0x163/0x2c0 [ 1467.680370][T24333] __should_failslab+0xb7/0x100 [ 1467.685242][T24333] should_failslab+0x9/0x14 [ 1467.689761][T24333] __kmalloc+0x2e0/0x770 [ 1467.694164][T24333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1467.700412][T24333] ? d_absolute_path+0x11b/0x170 [ 1467.705491][T24333] ? __d_path+0x140/0x140 [ 1467.710018][T24333] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1467.715439][T24333] tomoyo_encode2.part.0+0xf5/0x400 [ 1467.720776][T24333] tomoyo_encode+0x2b/0x50 [ 1467.725212][T24333] tomoyo_realpath_from_path+0x19c/0x660 [ 1467.730880][T24333] tomoyo_path_number_perm+0x1dd/0x520 [ 1467.736354][T24333] ? tomoyo_path_number_perm+0x193/0x520 [ 1467.742008][T24333] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1467.748003][T24333] ? lock_acquire+0x190/0x410 [ 1467.752698][T24333] ? chmod_common+0x176/0x460 [ 1467.757411][T24333] ? __kasan_check_write+0x14/0x20 [ 1467.762539][T24333] ? down_write+0xdf/0x150 [ 1467.767018][T24333] tomoyo_path_chmod+0x26/0x30 [ 1467.771823][T24333] security_path_chmod+0x107/0x160 [ 1467.776969][T24333] chmod_common+0x184/0x460 [ 1467.781492][T24333] ? zs_compact+0x670/0x1670 [ 1467.786096][T24333] ? vfs_fallocate+0xa50/0xa50 [ 1467.791000][T24333] ? strncpy_from_user+0x2d1/0x410 [ 1467.796132][T24333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1467.802388][T24333] ? getname_flags+0x277/0x5b0 [ 1467.807190][T24333] do_fchmodat+0xbe/0x150 [ 1467.811541][T24333] ? __ia32_sys_fchmod+0x80/0x80 [ 1467.816491][T24333] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1467.821970][T24333] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1467.828175][T24333] ? do_syscall_64+0x26/0x790 [ 1467.832986][T24333] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1467.838298][T24333] __x64_sys_chmod+0x5c/0x80 [ 1467.842912][T24333] do_syscall_64+0xfa/0x790 [ 1467.847445][T24333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1467.853348][T24333] RIP: 0033:0x45c6c9 [ 1467.857252][T24333] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1467.876860][T24333] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1467.885387][T24333] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1467.893374][T24333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1467.901445][T24333] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1467.909429][T24333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1467.917549][T24333] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000003 [ 1467.927446][T24333] ERROR: Out of memory at tomoyo_realpath_from_path. 10:11:07 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/109, 0x6d}], 0x1}, 0x2100) recvfrom$unix(r0, &(0x7f0000000440)=""/195, 0xc3, 0x0, &(0x7f0000000540)=@file={0x0, './bus\x00'}, 0x6e) 10:11:07 executing program 1 (fault-call:6 fault-nth:4): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:07 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1468.198523][T24500] overlayfs: missing 'lowerdir' 10:11:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x5, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:07 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1468.411742][T24504] xt_TCPMSS: Only works on TCP SYN packets [ 1468.484924][T24510] overlayfs: missing 'lowerdir' [ 1468.485086][T24508] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1468.602558][T24574] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1468.627438][T24508] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1468.656033][T24616] FAULT_INJECTION: forcing a failure. [ 1468.656033][T24616] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.711059][T24616] CPU: 1 PID: 24616 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1468.720988][T24616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.731066][T24616] Call Trace: [ 1468.734390][T24616] dump_stack+0x197/0x210 [ 1468.738763][T24616] should_fail.cold+0x5/0xf [ 1468.743296][T24616] ? setup_fault_attr+0x1f0/0x1f0 [ 1468.748350][T24616] ? ___might_sleep+0x163/0x2c0 [ 1468.753270][T24616] __should_failslab+0xb7/0x100 [ 1468.758144][T24616] should_failslab+0x9/0x14 [ 1468.762672][T24616] __kmalloc+0x2e0/0x770 [ 1468.766964][T24616] ? ovl_lookup_single+0x900/0x900 [ 1468.772099][T24616] ? __kasan_check_write+0x14/0x20 [ 1468.777386][T24616] ? ovl_lookup+0xc04/0x1a20 [ 1468.782000][T24616] ovl_lookup+0xc04/0x1a20 [ 1468.786466][T24616] ? ovl_path_next+0x2e0/0x2e0 [ 1468.791248][T24616] ? mark_lock+0xc2/0x1220 [ 1468.795710][T24616] ? find_held_lock+0x35/0x130 [ 1468.800497][T24616] ? unlazy_walk+0x168/0x3b0 [ 1468.805110][T24616] ? lockdep_init_map+0x1be/0x6d0 [ 1468.810160][T24616] ? lockdep_init_map+0x1be/0x6d0 [ 1468.815241][T24616] __lookup_slow+0x279/0x4d0 [ 1468.819879][T24616] ? vfs_unlink+0x620/0x620 [ 1468.824721][T24616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1468.830981][T24616] ? security_inode_permission+0xcb/0x100 [ 1468.836833][T24616] walk_component+0x7ce/0x10b0 [ 1468.841627][T24616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1468.848370][T24616] ? follow_dotdot_rcu+0x1120/0x1120 [ 1468.853678][T24616] ? walk_component+0x10b0/0x10b0 [ 1468.858757][T24616] path_lookupat.isra.0+0x183/0x460 [ 1468.863983][T24616] filename_lookup+0x1a3/0x3e0 [ 1468.868762][T24616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1468.875023][T24616] ? nd_jump_link+0x360/0x360 [ 1468.879740][T24616] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1468.885994][T24616] ? __phys_addr_symbol+0x30/0x70 [ 1468.891029][T24616] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1468.896761][T24616] ? __check_object_size+0x3d/0x437 [ 1468.901995][T24616] ? strncpy_from_user+0x2d1/0x410 [ 1468.907127][T24616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1468.913572][T24616] ? getname_flags+0x277/0x5b0 [ 1468.918354][T24616] user_path_at_empty+0x43/0x50 [ 1468.923234][T24616] do_fchmodat+0x9c/0x150 [ 1468.927583][T24616] ? __ia32_sys_fchmod+0x80/0x80 [ 1468.932532][T24616] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1468.938010][T24616] ? do_syscall_64+0x26/0x790 [ 1468.942796][T24616] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1468.948865][T24616] ? do_syscall_64+0x26/0x790 [ 1468.953558][T24616] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1468.958867][T24616] __x64_sys_chmod+0x5c/0x80 [ 1468.963475][T24616] do_syscall_64+0xfa/0x790 [ 1468.968003][T24616] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1468.973904][T24616] RIP: 0033:0x45c6c9 [ 1468.977804][T24616] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1468.997502][T24616] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1469.006033][T24616] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1469.014020][T24616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1469.021999][T24616] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1469.029982][T24616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1469.038079][T24616] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000004 10:11:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x3]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:08 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x6, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:08 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x24880, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x0, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000600)={r3, @in={{0x2, 0x0, @loopback}}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x27, 0x800}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={r4, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xff, @local, 0x5}]}, &(0x7f0000000480)=0x10) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x50940, 0x0) bind$ax25(r5, &(0x7f0000000340)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 10:11:08 executing program 1 (fault-call:6 fault-nth:5): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1469.484911][T24622] xt_TCPMSS: Only works on TCP SYN packets [ 1469.519819][T24623] overlayfs: missing 'lowerdir' [ 1469.568262][T24627] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1469.590467][T24628] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:09 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1469.631397][T24696] FAULT_INJECTION: forcing a failure. [ 1469.631397][T24696] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.680310][T24628] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1469.699987][T24696] CPU: 0 PID: 24696 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1469.710201][T24696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.720267][T24696] Call Trace: [ 1469.723577][T24696] dump_stack+0x197/0x210 [ 1469.728058][T24696] should_fail.cold+0x5/0xf [ 1469.732584][T24696] ? setup_fault_attr+0x1f0/0x1f0 [ 1469.737630][T24696] ? ___might_sleep+0x163/0x2c0 [ 1469.742504][T24696] ? ovl_destroy_inode+0x120/0x120 [ 1469.747644][T24696] __should_failslab+0xb7/0x100 [ 1469.752523][T24696] should_failslab+0x9/0x14 [ 1469.757053][T24696] kmem_cache_alloc+0x2aa/0x710 [ 1469.761953][T24696] ? _raw_spin_unlock+0x28/0x40 [ 1469.766825][T24696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1469.773085][T24696] ? ilookup5_nowait+0xaa/0xc0 [ 1469.777882][T24696] ? ovl_destroy_inode+0x120/0x120 [ 1469.783006][T24696] ? ovl_get_redirect_xattr.cold+0x1a/0x1a [ 1469.788844][T24696] ovl_alloc_inode+0x1c/0x190 [ 1469.793540][T24696] alloc_inode+0x68/0x1e0 [ 1469.797975][T24696] iget5_locked+0x63/0xe0 [ 1469.802327][T24696] ? ovl_inode_test+0x50/0x50 [ 1469.807026][T24696] ovl_get_inode+0x8da/0xca4 [ 1469.811650][T24696] ovl_lookup+0x8fe/0x1a20 [ 1469.816113][T24696] ? ovl_path_next+0x2e0/0x2e0 [ 1469.820892][T24696] ? mark_lock+0xc2/0x1220 [ 1469.825445][T24696] ? find_held_lock+0x35/0x130 [ 1469.830239][T24696] ? lockdep_init_map+0x1be/0x6d0 [ 1469.835295][T24696] __lookup_slow+0x279/0x4d0 [ 1469.839909][T24696] ? vfs_unlink+0x620/0x620 [ 1469.844467][T24696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1469.850721][T24696] ? security_inode_permission+0xcb/0x100 [ 1469.856493][T24696] walk_component+0x7ce/0x10b0 [ 1469.861291][T24696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1469.867558][T24696] ? follow_dotdot_rcu+0x1120/0x1120 [ 1469.872866][T24696] ? walk_component+0x10b0/0x10b0 [ 1469.877930][T24696] path_lookupat.isra.0+0x183/0x460 [ 1469.883170][T24696] filename_lookup+0x1a3/0x3e0 [ 1469.887952][T24696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1469.894316][T24696] ? nd_jump_link+0x360/0x360 [ 1469.899086][T24696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1469.905342][T24696] ? __phys_addr_symbol+0x30/0x70 [ 1469.910390][T24696] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1469.916133][T24696] ? __check_object_size+0x3d/0x437 [ 1469.921366][T24696] ? strncpy_from_user+0x2d1/0x410 [ 1469.926517][T24696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1469.932776][T24696] ? getname_flags+0x277/0x5b0 [ 1469.937713][T24696] user_path_at_empty+0x43/0x50 [ 1469.942582][T24696] do_fchmodat+0x9c/0x150 [ 1469.946931][T24696] ? __ia32_sys_fchmod+0x80/0x80 [ 1469.951876][T24696] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1469.957452][T24696] ? do_syscall_64+0x26/0x790 [ 1469.962139][T24696] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1469.968218][T24696] ? do_syscall_64+0x26/0x790 [ 1469.972907][T24696] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1469.978214][T24696] __x64_sys_chmod+0x5c/0x80 [ 1469.982824][T24696] do_syscall_64+0xfa/0x790 [ 1469.987349][T24696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1469.993387][T24696] RIP: 0033:0x45c6c9 [ 1469.997298][T24696] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1470.016910][T24696] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1470.025332][T24696] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1470.033328][T24696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1470.041419][T24696] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1470.049404][T24696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1470.057391][T24696] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000005 [ 1470.075677][T24696] overlayfs: failed to get inode (-12) 10:11:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x7, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1470.170098][T24738] xt_TCPMSS: Only works on TCP SYN packets 10:11:09 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000980)={0x100, 0x7, {0xffffffffffffffff}, {0xee01}, 0x4, 0x4}) setxattr$security_evm(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='security.evm\x00', &(0x7f0000000b40)=@sha1={0x1, "c7816bc4fc55b00b82029c423fb72fb12fc11679"}, 0x15, 0x2) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x7, 0x9, &(0x7f0000000880)=[{&(0x7f0000000140)="6422b3f7e376f06e1af9", 0xa, 0x6}, {&(0x7f0000000440)="fb4cf59ba4939964f76bc2e2f8ab9f15b13ef3c04e6ef4ccd41e15f315e6496528e30c7cdf002ca337e0ecd0449de4d89c97377d0c6654face5bd6bde6d00975ab21a551e671f3b9e0eb0f2f9764c6db0c1d28d5a7646750384f39c08844a9c59524472418ebb47768f772649be07480fab5ded1a9c3eef69d800546f018c74c08f06504e62108fb581abbfca73e1080994bbbdd9d3dac8cb9de0dd79ffee48232957c1c3b9e068981397f3548e8c43da5ac0a7dd8df5497918516f7f42295f55cd3103e7bb6f56b05b8957351d7a18269f1c9b81c12a8", 0xd7, 0xffffffff}, {&(0x7f0000000240)="04e09407408e6fc80fa7e759037c537fe051534e0b4fb09340908e5c7f8e8e0585b0f4367b17d8e85bf7258afefc25157a", 0x31, 0xfffffffffffffe00}, {&(0x7f0000000340)="3014b1ebb2893c098949e56e39a56d5e37dd8751c0d1ccd82fa60de17e5dbef284479632cfe4443a70712f88e07cd4902dac2a2c8a8968f1bb05676967c71b4690fcb601465e78a50a0dda7367c4c8bc6aa1ef9734988edd7226499fa0b09be310a57927c6d8640e2b1899b64038b179cbc3044d57c9282106d341a04b5109eab02f6d14cc19454a7eec4623e4f576fba28763609b8184ab53e8170656ab33233da0", 0xa2, 0xff}, {&(0x7f0000000540)="93fd1ed1e065ecd5888bb93eab7f5e99651ea18df54b4948784d59750d8a4a470cf2c62915313fdeeb662f83e66ca35ebe3e4abdba7c00e57aff233ec22026790d1c3be18727eb1e0d3808c42ecf9c9abd9d1913ff8622f831a40a82902cbc76abeb9b31a17a04fb8605dce7cab59be07e43bb29bbf472cdbdaeb994db6a241a914b4ca331d49251fb5583db27b161e049817102f51b61f30228d77f04954f9fcc60d389fd3e3b9bccb3845239f37801a74785", 0xb3, 0xffffffffffffffff}, {&(0x7f0000000600)="a50abd7252edd6809c6b27ad8951c45d0fe11b916d93849b", 0x18, 0x4}, {&(0x7f0000000640)="796f790878c6fa803760398215f64821ea411af1e353975b342e3683e63128f5c0c8a8c43f9d8f6f4e1d97bf1e14e0c1e3b10ed16cd7aa307d2318d17eb321917b1f4292a16694be385c899c8a5ac811981552aac8f6d3c5d0d301b42f24601efbac9f220aa9e73f77caf30265c52220ac2ebc9bff7a119ea251d87b4981136a0c1903aa859205c255ae86505ec37b9b95d33bad3e64875d5a5e3cad2af12c8ae670ef0b430aa88eeaa383be70c54c9d000de3e7b9d4aed1dbdbffb063205681067712a3c939c9a479968df31786097cbb782b4d03b1958ab975ba12f0264d55ef8ddb83d8e73b4db5e4109959a2aa268cf0d4b0ca54d14b95", 0xf9, 0x93}, {&(0x7f0000000740)="80534a1a4d0f592c3c1b8bc85803616a2a7f70e12ec19c7df03538163da6998f4b27cc56bb5b24f199d8727e65c1839d3bce0ede3e3f0a312d3d3846dab826f1dc276a2317e2e1f7eedcd5cb0bebba9d2515d341b2e6c8230db9099f27e156e3933ef0ebdac83bcb76881790bfe2a2a700883a110092739a0893622cf3f65dd4d7a54e93782f7083b6c550d20ccda8b7996143ebb1a7504a", 0x98, 0x100000001}, {&(0x7f0000000800)="85f44b574d866f8f7b8b15575c0ecddc92690148f34ba42084a3ebc570dcc22d0961c7f1e9b26202ebcf70595e453546ae3e86d6e2b7791cafec492b13ff4ca5e8c3af9c31bc5aefbf0d762c2a3dba437663572af77770d98266165064bb", 0x5e, 0x10001}], 0x100000, &(0x7f00000009c0)={[{@lazytime='lazytime'}, {@ikeep='ikeep'}], [{@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'bpf\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r6, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendto$packet(r1, &(0x7f0000000b80)="a81ca39b1c65ebe3401a1308ce4883c74c4d840952bfddfb012a2d12d8a988a21660286196dc8482dc96670b8b582438895c4709a1b670d27ade93face1365b02ad707ef61de6da104922a1e564e0224e7a673facbf928f2a78dbe4af74be3c1e25a584a72a59fadb15ac3b9a3f1a5f12f3c9b5195a003078a2cac1da98e3505216f3659ab0b08bf9131d53f760ecc81f71ad53c96", 0x95, 0x4000010, &(0x7f0000000c40)={0x11, 0xd, r6, 0x1, 0xbf, 0x6, @broadcast}, 0x14) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') syz_genetlink_get_family_id$wireguard(&(0x7f0000000a80)='wireguard\x00') 10:11:09 executing program 1 (fault-call:6 fault-nth:6): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1470.249383][T24755] overlayfs: missing 'lowerdir' 10:11:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1d, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:09 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1470.598244][T24932] overlayfs: missing 'lowerdir' [ 1470.620067][T24938] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1470.659162][T24957] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1470.666228][T24958] FAULT_INJECTION: forcing a failure. [ 1470.666228][T24958] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.721854][T24958] CPU: 1 PID: 24958 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1470.731903][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.741969][T24958] Call Trace: [ 1470.745282][T24958] dump_stack+0x197/0x210 [ 1470.749768][T24958] should_fail.cold+0x5/0xf [ 1470.754306][T24958] ? setup_fault_attr+0x1f0/0x1f0 [ 1470.759490][T24958] ? ___might_sleep+0x163/0x2c0 [ 1470.764373][T24958] ? ovl_destroy_inode+0x120/0x120 [ 1470.769503][T24958] __should_failslab+0xb7/0x100 [ 1470.774463][T24958] should_failslab+0x9/0x14 [ 1470.778984][T24958] kmem_cache_alloc+0x2aa/0x710 [ 1470.783966][T24958] ? _raw_spin_unlock+0x28/0x40 [ 1470.788831][T24958] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1470.795127][T24958] ? ilookup5_nowait+0xaa/0xc0 [ 1470.799923][T24958] ? ovl_destroy_inode+0x120/0x120 [ 1470.805167][T24958] ? ovl_get_redirect_xattr.cold+0x1a/0x1a [ 1470.810995][T24958] ovl_alloc_inode+0x1c/0x190 [ 1470.815912][T24958] alloc_inode+0x68/0x1e0 [ 1470.820262][T24958] iget5_locked+0x63/0xe0 [ 1470.824616][T24958] ? ovl_inode_test+0x50/0x50 [ 1470.829322][T24958] ovl_get_inode+0x8da/0xca4 [ 1470.833950][T24958] ovl_lookup+0x8fe/0x1a20 [ 1470.838420][T24958] ? ovl_path_next+0x2e0/0x2e0 [ 1470.843205][T24958] ? mark_lock+0xc2/0x1220 [ 1470.847657][T24958] ? find_held_lock+0x35/0x130 [ 1470.852585][T24958] ? lockdep_init_map+0x1be/0x6d0 [ 1470.857642][T24958] __lookup_slow+0x279/0x4d0 [ 1470.862367][T24958] ? vfs_unlink+0x620/0x620 [ 1470.866920][T24958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1470.873267][T24958] ? security_inode_permission+0xcb/0x100 [ 1470.879016][T24958] walk_component+0x7ce/0x10b0 [ 1470.883801][T24958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1470.890093][T24958] ? follow_dotdot_rcu+0x1120/0x1120 [ 1470.895409][T24958] ? walk_component+0x10b0/0x10b0 [ 1470.900473][T24958] path_lookupat.isra.0+0x183/0x460 [ 1470.905703][T24958] filename_lookup+0x1a3/0x3e0 [ 1470.910485][T24958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1470.917000][T24958] ? nd_jump_link+0x360/0x360 [ 1470.921716][T24958] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1470.927973][T24958] ? __phys_addr_symbol+0x30/0x70 [ 1470.933045][T24958] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1470.938782][T24958] ? __check_object_size+0x3d/0x437 [ 1470.944010][T24958] ? strncpy_from_user+0x2d1/0x410 [ 1470.949182][T24958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1470.955442][T24958] ? getname_flags+0x277/0x5b0 [ 1470.960232][T24958] user_path_at_empty+0x43/0x50 [ 1470.965221][T24958] do_fchmodat+0x9c/0x150 [ 1470.969569][T24958] ? __ia32_sys_fchmod+0x80/0x80 [ 1470.974816][T24958] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1470.980293][T24958] ? do_syscall_64+0x26/0x790 [ 1470.984983][T24958] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1470.991077][T24958] ? do_syscall_64+0x26/0x790 [ 1470.995773][T24958] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1471.001079][T24958] __x64_sys_chmod+0x5c/0x80 [ 1471.005694][T24958] do_syscall_64+0xfa/0x790 [ 1471.010403][T24958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1471.016304][T24958] RIP: 0033:0x45c6c9 10:11:10 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1471.020207][T24958] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1471.039956][T24958] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1471.048375][T24958] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1471.056454][T24958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1471.061018][T24961] overlayfs: missing 'lowerdir' [ 1471.064440][T24958] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1471.064451][T24958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1471.064460][T24958] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000006 [ 1471.077738][T24958] overlayfs: failed to get inode (-12) [ 1471.116660][T24846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1471.186184][T24924] device veth23 entered promiscuous mode 10:11:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x4]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x7fffffe, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:10 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:10 executing program 1 (fault-call:6 fault-nth:7): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1471.339348][T24846] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1471.428134][T24970] xt_TCPMSS: Only works on TCP SYN packets [ 1471.459981][T24969] overlayfs: missing 'lowerdir' [ 1471.465996][T24971] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:10 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1471.552144][T25027] FAULT_INJECTION: forcing a failure. [ 1471.552144][T25027] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.620905][T25027] CPU: 1 PID: 25027 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1471.630951][T25027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.641165][T25027] Call Trace: [ 1471.644508][T25027] dump_stack+0x197/0x210 [ 1471.647127][T25076] overlayfs: missing 'lowerdir' [ 1471.648908][T25027] should_fail.cold+0x5/0xf [ 1471.659317][T25027] ? setup_fault_attr+0x1f0/0x1f0 [ 1471.664592][T25027] ? ___might_sleep+0x163/0x2c0 [ 1471.670345][T25027] __should_failslab+0xb7/0x100 [ 1471.675240][T25027] should_failslab+0x9/0x14 [ 1471.679866][T25027] __kmalloc+0x2e0/0x770 [ 1471.684129][T25027] ? mark_held_locks+0xf0/0xf0 [ 1471.689087][T25027] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1471.694849][T25027] tomoyo_realpath_from_path+0xc5/0x660 [ 1471.700449][T25027] ? tomoyo_path_number_perm+0x193/0x520 [ 1471.706115][T25027] tomoyo_path_number_perm+0x1dd/0x520 [ 1471.711681][T25027] ? tomoyo_path_number_perm+0x193/0x520 [ 1471.717454][T25027] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1471.723514][T25027] ? lock_acquire+0x190/0x410 [ 1471.728218][T25027] ? chmod_common+0x176/0x460 [ 1471.733221][T25027] ? __kasan_check_write+0x14/0x20 [ 1471.738355][T25027] ? down_write+0xdf/0x150 [ 1471.742841][T25027] tomoyo_path_chmod+0x26/0x30 [ 1471.747635][T25027] security_path_chmod+0x107/0x160 [ 1471.752775][T25027] chmod_common+0x184/0x460 [ 1471.757416][T25027] ? zs_compact+0x670/0x1670 [ 1471.762026][T25027] ? vfs_fallocate+0xa50/0xa50 [ 1471.767034][T25027] ? strncpy_from_user+0x2d1/0x410 [ 1471.772274][T25027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1471.778541][T25027] ? getname_flags+0x277/0x5b0 [ 1471.783492][T25027] do_fchmodat+0xbe/0x150 [ 1471.787898][T25027] ? __ia32_sys_fchmod+0x80/0x80 [ 1471.792952][T25027] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1471.798700][T25027] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1471.804898][T25027] ? do_syscall_64+0x26/0x790 [ 1471.809605][T25027] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1471.815033][T25027] __x64_sys_chmod+0x5c/0x80 [ 1471.819893][T25027] do_syscall_64+0xfa/0x790 [ 1471.824648][T25027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1471.830661][T25027] RIP: 0033:0x45c6c9 [ 1471.834572][T25027] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1471.854587][T25027] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1471.863195][T25027] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 10:11:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x8000000, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:11 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1471.871361][T25027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1471.879474][T25027] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1471.887461][T25027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1471.895557][T25027] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000007 [ 1471.955832][T25027] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1471.982398][T25184] overlayfs: missing 'lowerdir' 10:11:11 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdi/file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:11 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:11 executing program 1 (fault-call:6 fault-nth:8): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1472.331868][T25188] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1472.355233][T25190] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1472.382078][T25188] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1472.418422][T25285] FAULT_INJECTION: forcing a failure. [ 1472.418422][T25285] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.478225][T25285] CPU: 1 PID: 25285 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1472.489908][T25285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.499944][T25302] overlayfs: unrecognized mount option "workdi/file1" or missing value [ 1472.500261][T25285] Call Trace: [ 1472.500291][T25285] dump_stack+0x197/0x210 [ 1472.500323][T25285] should_fail.cold+0x5/0xf [ 1472.521267][T25285] ? setup_fault_attr+0x1f0/0x1f0 [ 1472.526859][T25285] ? ___might_sleep+0x163/0x2c0 [ 1472.531745][T25285] __should_failslab+0xb7/0x100 [ 1472.532037][T25302] overlayfs: unrecognized mount option "workdi/file1" or missing value [ 1472.536622][T25285] should_failslab+0x9/0x14 [ 1472.536639][T25285] __kmalloc+0x2e0/0x770 [ 1472.536660][T25285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1472.536675][T25285] ? d_absolute_path+0x11b/0x170 [ 1472.536689][T25285] ? __d_path+0x140/0x140 [ 1472.536707][T25285] ? tomoyo_encode2.part.0+0xf5/0x400 10:11:12 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20200, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) [ 1472.536732][T25285] tomoyo_encode2.part.0+0xf5/0x400 [ 1472.536758][T25285] tomoyo_encode+0x2b/0x50 [ 1472.536777][T25285] tomoyo_realpath_from_path+0x19c/0x660 [ 1472.536809][T25285] tomoyo_path_number_perm+0x1dd/0x520 [ 1472.536822][T25285] ? tomoyo_path_number_perm+0x193/0x520 [ 1472.536845][T25285] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1472.536920][T25285] ? lock_acquire+0x190/0x410 [ 1472.613378][T25285] ? chmod_common+0x176/0x460 [ 1472.618323][T25285] ? __kasan_check_write+0x14/0x20 [ 1472.623465][T25285] ? down_write+0xdf/0x150 [ 1472.627922][T25285] tomoyo_path_chmod+0x26/0x30 [ 1472.632907][T25285] security_path_chmod+0x107/0x160 [ 1472.638389][T25285] chmod_common+0x184/0x460 [ 1472.643012][T25285] ? zs_compact+0x670/0x1670 [ 1472.647836][T25285] ? vfs_fallocate+0xa50/0xa50 [ 1472.652769][T25285] ? strncpy_from_user+0x2d1/0x410 [ 1472.657918][T25285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1472.664542][T25285] ? getname_flags+0x277/0x5b0 [ 1472.669362][T25285] do_fchmodat+0xbe/0x150 [ 1472.673956][T25285] ? __ia32_sys_fchmod+0x80/0x80 [ 1472.678943][T25285] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1472.684561][T25285] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1472.690654][T25285] ? do_syscall_64+0x26/0x790 [ 1472.695367][T25285] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1472.700961][T25285] __x64_sys_chmod+0x5c/0x80 [ 1472.705606][T25285] do_syscall_64+0xfa/0x790 [ 1472.710371][T25285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1472.716280][T25285] RIP: 0033:0x45c6c9 [ 1472.720196][T25285] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1472.740291][T25285] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1472.748855][T25285] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1472.756975][T25285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1472.765189][T25285] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1472.773182][T25285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1472.781367][T25285] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000008 [ 1472.813905][T25285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1472.954586][T25307] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1472.985366][T25307] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x5]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:12 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:12 executing program 1 (fault-call:6 fault-nth:9): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:12 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1473.469174][T25319] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1473.472531][T25320] xt_TCPMSS: Only works on TCP SYN packets [ 1473.484431][T25316] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1473.493475][T25321] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1473.512414][T25319] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1473.547709][T25326] FAULT_INJECTION: forcing a failure. [ 1473.547709][T25326] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.550338][T25321] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1473.576846][T25326] CPU: 0 PID: 25326 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1473.587499][T25326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.597741][T25326] Call Trace: [ 1473.601229][T25326] dump_stack+0x197/0x210 [ 1473.605709][T25326] should_fail.cold+0x5/0xf [ 1473.610489][T25326] ? setup_fault_attr+0x1f0/0x1f0 [ 1473.615551][T25326] ? ___might_sleep+0x163/0x2c0 [ 1473.620526][T25326] __should_failslab+0xb7/0x100 [ 1473.625752][T25326] should_failslab+0x9/0x14 [ 1473.630440][T25326] __kmalloc+0x2e0/0x770 [ 1473.634794][T25326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1473.641186][T25326] ? d_absolute_path+0x11b/0x170 [ 1473.646298][T25326] ? __d_path+0x140/0x140 [ 1473.650831][T25326] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1473.656327][T25326] tomoyo_encode2.part.0+0xf5/0x400 [ 1473.661828][T25326] tomoyo_encode+0x2b/0x50 [ 1473.666411][T25326] tomoyo_realpath_from_path+0x19c/0x660 [ 1473.672095][T25326] tomoyo_path_number_perm+0x1dd/0x520 [ 1473.678096][T25326] ? tomoyo_path_number_perm+0x193/0x520 [ 1473.683857][T25326] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1473.689923][T25326] ? lock_acquire+0x190/0x410 [ 1473.694915][T25326] ? chmod_common+0x176/0x460 [ 1473.699675][T25326] ? __kasan_check_write+0x14/0x20 [ 1473.705219][T25326] ? down_write+0xdf/0x150 [ 1473.709895][T25326] tomoyo_path_chmod+0x26/0x30 [ 1473.714817][T25326] security_path_chmod+0x107/0x160 [ 1473.719964][T25326] chmod_common+0x184/0x460 [ 1473.724499][T25326] ? zs_compact+0x670/0x1670 [ 1473.730080][T25326] ? vfs_fallocate+0xa50/0xa50 [ 1473.734877][T25326] ? strncpy_from_user+0x2d1/0x410 [ 1473.740155][T25326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1473.746549][T25326] ? getname_flags+0x277/0x5b0 [ 1473.751739][T25326] do_fchmodat+0xbe/0x150 [ 1473.756105][T25326] ? __ia32_sys_fchmod+0x80/0x80 [ 1473.761376][T25326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1473.767008][T25326] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1473.773189][T25326] ? do_syscall_64+0x26/0x790 [ 1473.778015][T25326] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1473.783336][T25326] __x64_sys_chmod+0x5c/0x80 [ 1473.788281][T25326] do_syscall_64+0xfa/0x790 [ 1473.792824][T25326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1473.799120][T25326] RIP: 0033:0x45c6c9 [ 1473.803123][T25326] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1473.823470][T25326] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1473.832256][T25326] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1473.840269][T25326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1473.848554][T25326] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1473.856715][T25326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1473.864973][T25326] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000009 [ 1473.886787][T25326] ERROR: Out of memory at tomoyo_realpath_from_path. 10:11:13 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:13 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000340)={0x1000, 0x1, 0x4, 0x80000, 0x6, {r1, r2/1000+30000}, {0x7, 0x2, 0x6, 0x1c, 0x7, 0x7f, "b9c58ae7"}, 0xffff, 0x4, @planes=&(0x7f00000000c0)={0xfff, 0xffffffff, @mem_offset=0x7, 0x7}, 0x65c84009, 0x0, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000000000000ec00c60000000000fd32cacd8453217dd51773c8ee4667f4a0d5d7e05ba574a589bd4a1aaa714e7955334043fd79e1b40aee4e974abc6ba003945363a8dd5a1c90a58cd73b384b1e06d27b983de7706550988c04d63deb32e1cdc79f76870410d13d2ed3cfcb0ee7b2f3bf95f58cfb5ded203b4acacce14779facdb754eba19a8014"], 0x18, 0x8405}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000600)={r7, @in={{0x2, 0x0, @loopback}}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r7, 0xe9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000003c0)={r8, 0x8, 0x5, [0x3, 0x7, 0xfffc, 0x1, 0x6]}, &(0x7f0000000440)=0x12) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1474.025288][T25437] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1474.046759][T25437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:11:13 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:13 executing program 1 (fault-call:6 fault-nth:10): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1474.304116][T25439] overlayfs: unrecognized mount option "upper" or missing value [ 1474.347425][T25446] xt_TCPMSS: Only works on TCP SYN packets [ 1474.400898][T25445] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1474.416256][T25448] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:13 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1474.474719][T25522] FAULT_INJECTION: forcing a failure. [ 1474.474719][T25522] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.504634][T25445] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1474.544550][T25522] CPU: 1 PID: 25522 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1474.554728][T25522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.565330][T25522] Call Trace: [ 1474.568650][T25522] dump_stack+0x197/0x210 [ 1474.573035][T25522] should_fail.cold+0x5/0xf [ 1474.577933][T25522] ? setup_fault_attr+0x1f0/0x1f0 [ 1474.582998][T25522] ? ___might_sleep+0x163/0x2c0 [ 1474.589425][T25522] __should_failslab+0xb7/0x100 [ 1474.594827][T25522] should_failslab+0x9/0x14 [ 1474.599421][T25522] __kmalloc+0x2e0/0x770 [ 1474.603697][T25522] ? mark_held_locks+0xf0/0xf0 [ 1474.608763][T25522] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1474.614522][T25522] tomoyo_realpath_from_path+0xc5/0x660 [ 1474.620185][T25522] ? tomoyo_path_perm+0x1cb/0x430 [ 1474.626493][T25522] tomoyo_path_perm+0x230/0x430 [ 1474.631382][T25522] ? tomoyo_path_perm+0x1cb/0x430 [ 1474.634765][T25553] overlayfs: unrecognized mount option "upper" or missing value [ 1474.636575][T25522] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1474.636632][T25522] ? is_bpf_image_address+0x1da/0x290 [ 1474.636712][T25522] ? common_perm+0x9a0/0x9a0 [ 1474.660608][T25522] ? stack_trace_consume_entry+0x170/0x170 [ 1474.666806][T25522] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1474.672860][T25522] tomoyo_inode_getattr+0x1d/0x30 [ 1474.677923][T25522] security_inode_getattr+0xf2/0x150 [ 1474.683333][T25522] vfs_getattr+0x25/0x70 [ 1474.687816][T25522] ovl_copy_up_one+0x28e/0x1860 [ 1474.692950][T25522] ? find_held_lock+0x35/0x130 [ 1474.697764][T25522] ? debug_check_no_obj_freed+0x20a/0x441 [ 1474.703517][T25522] ? ovl_copy_up_inode+0x600/0x600 [ 1474.708796][T25522] ? __kasan_check_read+0x11/0x20 [ 1474.713881][T25522] ? __kasan_check_read+0x11/0x20 [ 1474.718932][T25522] ? __lock_acquire+0x1af3/0x6320 [ 1474.724034][T25522] ? __kasan_check_read+0x11/0x20 [ 1474.729083][T25522] ? __lock_acquire+0x8a0/0x6320 [ 1474.734529][T25522] ? __kasan_check_read+0x11/0x20 [ 1474.739651][T25522] ? __kasan_check_read+0x11/0x20 [ 1474.744723][T25522] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1474.750594][T25522] ? dget_parent+0x1a8/0x560 [ 1474.755255][T25522] ovl_copy_up_flags+0x15a/0x1e0 [ 1474.760228][T25522] ovl_copy_up+0x18/0x1c [ 1474.764485][T25522] ovl_setattr+0x1ce/0x930 [ 1474.768929][T25522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1474.775572][T25522] ? ovl_fill_inode+0x620/0x620 [ 1474.780505][T25522] ? evm_inode_setattr+0x70/0x170 [ 1474.785562][T25522] ? ovl_fill_inode+0x620/0x620 [ 1474.790608][T25522] notify_change+0xb6d/0x1060 [ 1474.795334][T25522] ? audit_init_watch+0xd0/0x1d0 [ 1474.800529][T25522] chmod_common+0x217/0x460 [ 1474.805382][T25522] ? perf_trace_cma_release+0x340/0x470 [ 1474.810947][T25522] ? vfs_fallocate+0xa50/0xa50 [ 1474.815749][T25522] ? strncpy_from_user+0x2d1/0x410 [ 1474.821010][T25522] do_fchmodat+0xbe/0x150 [ 1474.825485][T25522] ? __ia32_sys_fchmod+0x80/0x80 [ 1474.830538][T25522] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1474.836040][T25522] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1474.842360][T25522] ? do_syscall_64+0x26/0x790 [ 1474.847159][T25522] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1474.852709][T25522] __x64_sys_chmod+0x5c/0x80 [ 1474.857353][T25522] do_syscall_64+0xfa/0x790 [ 1474.862236][T25522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1474.868368][T25522] RIP: 0033:0x45c6c9 [ 1474.872298][T25522] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1474.892133][T25522] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1474.900949][T25522] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1474.909028][T25522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1474.917152][T25522] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1474.925151][T25522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1474.933217][T25522] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000a [ 1475.097531][T25522] ERROR: Out of memory at tomoyo_realpath_from_path. 10:11:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x6]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:14 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x4, "eafdfc2802c23d30025fe32f0f707952c2289c422e36ab0f95c3e25e865c52fb", 0x3, 0x80000000, 0xdbb, 0x200000, 0x2}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x361501, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@null=' \x00', 0x0, 'erspan0\x00'}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x14) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r3}) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000e0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000001080000000000000100008000"/192]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x6, 0x3, 0x4, 0x40000000, 0x0, {0x77359400}, {0x4, 0x0, 0x0, 0x80, 0x8, 0x4, "18aa32c3"}, 0x5, 0x1, @offset=0x2, 0x200, 0x0, r4}) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:14 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:14 executing program 1 (fault-call:6 fault-nth:11): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1475.524360][T25667] xt_TCPMSS: Only works on TCP SYN packets [ 1475.532565][T25666] overlayfs: unrecognized mount option "upper" or missing value [ 1475.560171][T25664] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1475.609289][T25665] overlayfs: './bus' not a directory [ 1475.624026][T25703] FAULT_INJECTION: forcing a failure. [ 1475.624026][T25703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1475.637408][T25703] CPU: 1 PID: 25703 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1475.648211][T25703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.658450][T25703] Call Trace: [ 1475.661924][T25703] dump_stack+0x197/0x210 [ 1475.666716][T25703] should_fail.cold+0x5/0xf [ 1475.671360][T25703] ? setup_fault_attr+0x1f0/0x1f0 [ 1475.676607][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.681752][T25703] ? mark_lock+0xc2/0x1220 [ 1475.686200][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.691390][T25703] should_fail_alloc_page+0x50/0x60 [ 1475.696802][T25703] __alloc_pages_nodemask+0x1a1/0x910 [ 1475.702292][T25703] ? mark_lock+0xc2/0x1220 [ 1475.706866][T25703] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1475.712849][T25703] ? mark_lock+0xc2/0x1220 [ 1475.717471][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.722854][T25703] cache_grow_begin+0x90/0xc60 [ 1475.727730][T25703] ? trace_hardirqs_off+0x62/0x240 [ 1475.733006][T25703] __kmalloc+0x6b2/0x770 [ 1475.737536][T25703] ? mark_held_locks+0xf0/0xf0 [ 1475.742345][T25703] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1475.748199][T25703] tomoyo_realpath_from_path+0xc5/0x660 [ 1475.753888][T25703] ? tomoyo_path_perm+0x1cb/0x430 [ 1475.758958][T25703] tomoyo_path_perm+0x230/0x430 [ 1475.763941][T25703] ? tomoyo_path_perm+0x1cb/0x430 [ 1475.769003][T25703] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1475.775315][T25703] ? is_bpf_image_address+0x1da/0x290 [ 1475.780733][T25703] ? __kernel_text_address+0xd/0x40 [ 1475.785963][T25703] ? unwind_get_return_address+0x61/0xa0 [ 1475.791780][T25703] ? stack_trace_save+0x8f/0xc0 [ 1475.796896][T25703] ? stack_trace_consume_entry+0x170/0x170 [ 1475.802929][T25703] tomoyo_inode_getattr+0x1d/0x30 [ 1475.807978][T25703] security_inode_getattr+0xf2/0x150 [ 1475.813399][T25703] vfs_getattr+0x25/0x70 [ 1475.817818][T25703] ovl_copy_up_one+0x134/0x1860 [ 1475.822697][T25703] ? find_held_lock+0x35/0x130 [ 1475.827630][T25703] ? debug_check_no_obj_freed+0x20a/0x441 [ 1475.833386][T25703] ? ovl_copy_up_inode+0x600/0x600 [ 1475.838862][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.844084][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.849447][T25703] ? __lock_acquire+0x1af3/0x6320 [ 1475.854830][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.860011][T25703] ? __lock_acquire+0x8a0/0x6320 [ 1475.865183][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.870303][T25703] ? __kasan_check_read+0x11/0x20 [ 1475.875730][T25703] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1475.881474][T25703] ? dget_parent+0x1a8/0x560 [ 1475.886511][T25703] ovl_copy_up_flags+0x15a/0x1e0 [ 1475.891890][T25703] ovl_copy_up+0x18/0x1c [ 1475.896512][T25703] ovl_setattr+0x1ce/0x930 [ 1475.901052][T25703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1475.907447][T25703] ? ovl_fill_inode+0x620/0x620 [ 1475.912325][T25703] ? evm_inode_setattr+0x70/0x170 [ 1475.917547][T25703] ? ovl_fill_inode+0x620/0x620 [ 1475.922669][T25703] notify_change+0xb6d/0x1060 [ 1475.927402][T25703] ? audit_init_watch+0xd0/0x1d0 [ 1475.932488][T25703] chmod_common+0x217/0x460 [ 1475.937022][T25703] ? perf_trace_cma_release+0x340/0x470 [ 1475.942601][T25703] ? vfs_fallocate+0xa50/0xa50 [ 1475.947488][T25703] ? strncpy_from_user+0x2d1/0x410 [ 1475.952984][T25703] do_fchmodat+0xbe/0x150 [ 1475.957474][T25703] ? __ia32_sys_fchmod+0x80/0x80 [ 1475.962614][T25703] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1475.968191][T25703] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1475.974513][T25703] ? do_syscall_64+0x26/0x790 [ 1475.979216][T25703] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1475.984535][T25703] __x64_sys_chmod+0x5c/0x80 [ 1475.989355][T25703] do_syscall_64+0xfa/0x790 [ 1475.993884][T25703] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1476.000144][T25703] RIP: 0033:0x45c6c9 [ 1476.004271][T25703] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1476.024520][T25703] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1476.033197][T25703] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1476.041688][T25703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1476.049762][T25703] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 10:11:15 executing program 5: mkdir(&(0x7f0000000080)='./file1\x00', 0x80) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f1ee93d37726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:15 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1476.057915][T25703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1476.066012][T25703] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000b 10:11:15 executing program 1 (fault-call:6 fault-nth:12): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1476.181491][T25780] overlayfs: workdir and upperdir must be separate subtrees [ 1476.208881][T25779] overlayfs: unrecognized mount option "woé=7rkdir=./file1" or missing value 10:11:15 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1476.275321][T25779] overlayfs: unrecognized mount option "woé=7rkdir=./file1" or missing value 10:11:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:15 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x20) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x0, {{0x2, 0x4e20, @loopback}}}, 0x88) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000680)="5e1eddb0c4884d873c747dadf2ffd57afd7da85800e49167a10ae28e94b21144fe116c038dfd4f1ae4f6b158916aa2b3cf9a5c89da63b953e23c402e4ede1846e4abd850e3968f114f5c91b81414da46687bb6fde26b86d6742f1d51438cc7aab13e90c27d279b870cfdf3e2c626a2fe426a98f8b2a12daee4f09f0331cc6f3d7fdcaf69fa94a802b191005e04ae763f86e0b8d85ba9c31e76a0d0fadb50362191e6d8e676a3d977133d6db54c6400889d891efa81efbb5aca31bb5ae879c2d52958439a23183b1b3dd7c621", &(0x7f0000000140)=""/61}, 0x20) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726bb97c9f8a898d53e02296098e927c3f6469baea28478fc6046a312c7570706572646a723d2ec7da63014da2c22f4f696c6530"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000005c0)="3089a1fb633fe06927fd6ac5adda5d3c891dc1861d5892ad5040a7e8441740d7578a036b1985fec2d54f707f596b46bc0800000000000000e2da5f4a72b165e2ac472d8eb8418862cebc484d83a5fd849ebe34a0b38cc3d324cff3e20500e53a3cf998f77b12b417a19d084726eaff31718a0cc07e408207c4e3f4ae36d8cea35e3e1fe66452432ec842467599cbf30d26134aa6927dd41bd9d1882d43107bede42661dac3a297210dc0222c0b69d6d6aae779") [ 1476.484484][T25889] xt_TCPMSS: Only works on TCP SYN packets [ 1476.537663][T25894] overlayfs: workdir and upperdir must be separate subtrees [ 1476.549035][T25893] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1476.619158][T25933] FAULT_INJECTION: forcing a failure. [ 1476.619158][T25933] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.650212][T25927] overlayfs: unrecognized mount option "work¹|ŸŠ‰Sà"– Ž’|?diºê(GÆj1" or missing value [ 1476.663258][T25933] CPU: 1 PID: 25933 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1476.673652][T25933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.683734][T25933] Call Trace: [ 1476.687060][T25933] dump_stack+0x197/0x210 [ 1476.691647][T25933] should_fail.cold+0x5/0xf [ 1476.696359][T25933] ? setup_fault_attr+0x1f0/0x1f0 [ 1476.701740][T25933] ? ___might_sleep+0x163/0x2c0 [ 1476.706735][T25933] __should_failslab+0xb7/0x100 [ 1476.711621][T25933] should_failslab+0x9/0x14 [ 1476.716324][T25933] kmem_cache_alloc+0x2aa/0x710 [ 1476.721210][T25933] ? __kasan_check_write+0x14/0x20 [ 1476.726655][T25933] __d_alloc+0x2e/0x8c0 [ 1476.730851][T25933] d_alloc+0x4d/0x280 [ 1476.735037][T25933] d_alloc_parallel+0xf4/0x1c00 [ 1476.739989][T25933] ? ext4_xattr_ibody_inline_set+0x2d0/0x2d0 [ 1476.746370][T25933] ? __kasan_check_read+0x11/0x20 [ 1476.751508][T25933] ? __lock_acquire+0x8a0/0x6320 [ 1476.756482][T25933] ? mark_lock+0xc2/0x1220 [ 1476.760932][T25933] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1476.765944][T25933] ? __d_lookup+0x408/0x750 [ 1476.770507][T25933] ? find_held_lock+0x35/0x130 [ 1476.775446][T25933] ? lockdep_init_map+0x1be/0x6d0 [ 1476.780503][T25933] ? lockdep_init_map+0x1be/0x6d0 [ 1476.785664][T25933] __lookup_slow+0x1ab/0x4d0 [ 1476.790332][T25933] ? vfs_unlink+0x620/0x620 [ 1476.795229][T25933] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1476.800564][T25933] ? d_lookup+0x199/0x260 [ 1476.805204][T25933] lookup_one_len+0x16d/0x1a0 [ 1476.809943][T25933] ? __lookup_slow+0x4d0/0x4d0 [ 1476.814888][T25933] ? lock_rename+0x1ef/0x290 [ 1476.815578][T26007] overlayfs: unrecognized mount option "work¹|ŸŠ‰Sà"– Ž’|?diºê(GÆj1" or missing value [ 1476.819703][T25933] ovl_lookup_temp+0x114/0x1a0 [ 1476.819752][T25933] ? ovl_aio_request_cache_destroy+0x20/0x20 [ 1476.819790][T25933] ovl_create_temp+0x1e/0x60 [ 1476.819811][T25933] ovl_copy_up_one+0x7db/0x1860 [ 1476.819833][T25933] ? find_held_lock+0x35/0x130 [ 1476.855316][T25933] ? debug_check_no_obj_freed+0x120/0x441 [ 1476.861214][T25933] ? ovl_copy_up_inode+0x600/0x600 [ 1476.866366][T25933] ? __kasan_check_read+0x11/0x20 [ 1476.871650][T25933] ? __kasan_check_read+0x11/0x20 [ 1476.876830][T25933] ? __lock_acquire+0x1af3/0x6320 [ 1476.882013][T25933] ? __kasan_check_read+0x11/0x20 [ 1476.887197][T25933] ? __lock_acquire+0x8a0/0x6320 [ 1476.892368][T25933] ? __kasan_check_read+0x11/0x20 [ 1476.897609][T25933] ? __kasan_check_read+0x11/0x20 [ 1476.902758][T25933] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1476.908596][T25933] ? dget_parent+0x1a8/0x560 [ 1476.913240][T25933] ovl_copy_up_flags+0x15a/0x1e0 [ 1476.918387][T25933] ovl_copy_up+0x18/0x1c [ 1476.922663][T25933] ovl_setattr+0x1ce/0x930 [ 1476.927439][T25933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1476.933715][T25933] ? ovl_fill_inode+0x620/0x620 [ 1476.938597][T25933] ? evm_inode_setattr+0x70/0x170 [ 1476.944116][T25933] ? ovl_fill_inode+0x620/0x620 [ 1476.948996][T25933] notify_change+0xb6d/0x1060 [ 1476.953919][T25933] ? audit_init_watch+0xd0/0x1d0 [ 1476.959177][T25933] chmod_common+0x217/0x460 [ 1476.963903][T25933] ? perf_trace_cma_release+0x340/0x470 [ 1476.969560][T25933] ? vfs_fallocate+0xa50/0xa50 [ 1476.974364][T25933] ? strncpy_from_user+0x2d1/0x410 [ 1476.979687][T25933] do_fchmodat+0xbe/0x150 [ 1476.984357][T25933] ? __ia32_sys_fchmod+0x80/0x80 [ 1476.989538][T25933] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1476.995324][T25933] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1477.001796][T25933] ? do_syscall_64+0x26/0x790 [ 1477.006624][T25933] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1477.011943][T25933] __x64_sys_chmod+0x5c/0x80 [ 1477.016562][T25933] do_syscall_64+0xfa/0x790 [ 1477.021103][T25933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1477.027271][T25933] RIP: 0033:0x45c6c9 [ 1477.031178][T25933] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1477.051471][T25933] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1477.060159][T25933] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1477.068304][T25933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1477.076299][T25933] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1477.084448][T25933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1477.092828][T25933] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000c 10:11:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x7]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:16 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:16 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001180)='/dev/vcsu\x00', 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7275}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x400}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) 10:11:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:16 executing program 1 (fault-call:6 fault-nth:13): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1477.307354][T26015] xt_TCPMSS: Only works on TCP SYN packets [ 1477.327752][T26016] overlayfs: workdir and upperdir must be separate subtrees [ 1477.342158][T26012] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:16 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1477.397728][T26020] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1477.433155][T26012] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1477.461589][T26125] FAULT_INJECTION: forcing a failure. [ 1477.461589][T26125] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.488033][T26125] CPU: 1 PID: 26125 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1477.498405][T26125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.508681][T26125] Call Trace: 10:11:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1477.512141][T26125] dump_stack+0x197/0x210 [ 1477.516661][T26125] should_fail.cold+0x5/0xf [ 1477.521408][T26125] ? setup_fault_attr+0x1f0/0x1f0 [ 1477.526484][T26125] ? ___might_sleep+0x163/0x2c0 [ 1477.531673][T26125] __should_failslab+0xb7/0x100 [ 1477.536557][T26125] should_failslab+0x9/0x14 [ 1477.541308][T26125] kmem_cache_alloc+0x2aa/0x710 [ 1477.546203][T26125] ? __kasan_check_write+0x14/0x20 [ 1477.551499][T26125] __d_alloc+0x2e/0x8c0 [ 1477.555689][T26125] d_alloc+0x4d/0x280 [ 1477.559713][T26125] d_alloc_parallel+0xf4/0x1c00 [ 1477.564593][T26125] ? ext4_xattr_ibody_inline_set+0x2d0/0x2d0 [ 1477.570767][T26125] ? __kasan_check_read+0x11/0x20 [ 1477.575817][T26125] ? __lock_acquire+0x8a0/0x6320 [ 1477.580997][T26125] ? mark_lock+0xc2/0x1220 [ 1477.585452][T26125] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1477.590328][T26125] ? __d_lookup+0x408/0x750 [ 1477.595090][T26125] ? find_held_lock+0x35/0x130 [ 1477.599882][T26125] ? lockdep_init_map+0x1be/0x6d0 [ 1477.604960][T26125] ? lockdep_init_map+0x1be/0x6d0 [ 1477.605636][T26130] overlayfs: failed to resolve './fil': -2 [ 1477.610021][T26125] __lookup_slow+0x1ab/0x4d0 [ 1477.610042][T26125] ? vfs_unlink+0x620/0x620 [ 1477.610074][T26125] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1477.610102][T26125] ? d_lookup+0x199/0x260 [ 1477.610135][T26125] lookup_one_len+0x16d/0x1a0 [ 1477.640070][T26125] ? __lookup_slow+0x4d0/0x4d0 [ 1477.645026][T26125] ? lock_rename+0x1ef/0x290 [ 1477.649855][T26125] ovl_lookup_temp+0x114/0x1a0 [ 1477.654826][T26125] ? ovl_aio_request_cache_destroy+0x20/0x20 10:11:17 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1477.660863][T26125] ovl_create_temp+0x1e/0x60 [ 1477.665485][T26125] ovl_copy_up_one+0x7db/0x1860 [ 1477.670363][T26125] ? find_held_lock+0x35/0x130 [ 1477.675156][T26125] ? debug_check_no_obj_freed+0x120/0x441 [ 1477.681158][T26125] ? ovl_copy_up_inode+0x600/0x600 [ 1477.686310][T26125] ? __kasan_check_read+0x11/0x20 [ 1477.691579][T26125] ? __kasan_check_read+0x11/0x20 [ 1477.696961][T26125] ? __lock_acquire+0x1af3/0x6320 [ 1477.702140][T26125] ? __kasan_check_read+0x11/0x20 [ 1477.707434][T26125] ? __lock_acquire+0x8a0/0x6320 [ 1477.712502][T26125] ? __kasan_check_read+0x11/0x20 [ 1477.717842][T26125] ? __kasan_check_read+0x11/0x20 [ 1477.722900][T26125] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1477.729078][T26125] ? dget_parent+0x1a8/0x560 [ 1477.733732][T26125] ovl_copy_up_flags+0x15a/0x1e0 [ 1477.738710][T26125] ovl_copy_up+0x18/0x1c [ 1477.743125][T26125] ovl_setattr+0x1ce/0x930 [ 1477.747573][T26125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1477.754089][T26125] ? ovl_fill_inode+0x620/0x620 [ 1477.758969][T26125] ? evm_inode_setattr+0x70/0x170 [ 1477.764031][T26125] ? ovl_fill_inode+0x620/0x620 [ 1477.769055][T26125] notify_change+0xb6d/0x1060 [ 1477.773919][T26125] ? audit_init_watch+0xd0/0x1d0 [ 1477.779131][T26125] chmod_common+0x217/0x460 [ 1477.783965][T26125] ? perf_trace_cma_release+0x340/0x470 [ 1477.789763][T26125] ? vfs_fallocate+0xa50/0xa50 [ 1477.794996][T26125] ? strncpy_from_user+0x2d1/0x410 [ 1477.800311][T26125] do_fchmodat+0xbe/0x150 [ 1477.805001][T26125] ? __ia32_sys_fchmod+0x80/0x80 [ 1477.810305][T26125] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1477.816077][T26125] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1477.819597][T26233] overlayfs: failed to resolve './fil': -2 [ 1477.822319][T26125] ? do_syscall_64+0x26/0x790 [ 1477.822340][T26125] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1477.822367][T26125] __x64_sys_chmod+0x5c/0x80 [ 1477.822391][T26125] do_syscall_64+0xfa/0x790 [ 1477.848032][T26125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1477.854230][T26125] RIP: 0033:0x45c6c9 10:11:17 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1477.858261][T26125] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1477.878153][T26125] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1477.886807][T26125] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1477.895076][T26125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1477.903246][T26125] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1477.911462][T26125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1477.919571][T26125] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000d 10:11:17 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file1\x00', 0x6, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="bbcf4723d430b9f995506d839e6c85ce29fb3b82dc5ab807b2a2310ae7e5132087c322317a5502bd3557969c53436f91ef5f21b1037b4dc940cedcda51de8b3b", 0x40, 0x3}, {&(0x7f0000000340)="9f17f4c2218cf69306245d87f5fba2b3c838108692c647b486f7e2c715279a50eb9293b4c76c7ca3cade78a3b8e927db5b31d309578b48f6365b018c95e8579cc675ea70d664c8fe6983e734ec9df2cca686c7e10d7350886cf4dff16740978a2b0491580c0486d261074fdfb2a0f162b1158b7bb3b7a31da2ea070f1d02751ccb0a35084e1a4eb051ef23d2e41177beeb53522fcf0cba6352d3f59251edbcc74fbc1bc2299f296784", 0xa9, 0x1}], 0x240400, &(0x7f0000000440)={[], [{@appraise_type='appraise_type=imasig'}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x34, 0x30, 0x34, 0x34, 0x31, 0x63, 0x62], 0x2d, [0x62, 0x64, 0x39, 0x32], 0x2d, [0x65, 0x32, 0x30, 0x37], 0x2d, [0x32, 0x38, 0x38, 0x61], 0x2d, [0x34, 0x6b, 0x37, 0x62, 0x37, 0x65, 0x39, 0x65]}}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bpf\x00'}}, {@context={'context', 0x3d, 'staff_u'}}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_open_dev$vcsu(&(0x7f00000004c0)='/dev/vcsu#\x00', 0xffffffffffffff80, 0x10000) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) write$UHID_CREATE2(r1, &(0x7f0000000500)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x71, 0x1ff, 0x2, 0x80, 0xffffffff, 0x7, "ce172c0d9dfacbd76911153400b3df9ba209e204731cb0a10b00404cc7a6822c3712d8f828e4f0df4a3ae7131128dc2b1417e051bce601d1ab3c6c2d99f397a2b1f7d41fd4996d2ded0d03491be48273f70339896d119c40f326cc9eb219ab5977247846143a56618fd8ac8cff4b69b527"}}, 0x189) mmap$usbfs(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, 0x80010, r0, 0x52) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:17 executing program 1 (fault-call:6 fault-nth:14): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1478.098604][T26236] overlayfs: failed to resolve './fil': -2 10:11:17 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1478.302125][T26238] overlayfs: failed to resolve './file': -2 [ 1478.434526][T26244] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1478.489492][T26245] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1478.562399][T26252] FAULT_INJECTION: forcing a failure. [ 1478.562399][T26252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1478.565704][T26255] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1478.576182][T26252] CPU: 0 PID: 26252 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1478.576195][T26252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.576201][T26252] Call Trace: [ 1478.576233][T26252] dump_stack+0x197/0x210 [ 1478.576260][T26252] should_fail.cold+0x5/0xf [ 1478.576283][T26252] ? setup_fault_attr+0x1f0/0x1f0 [ 1478.576324][T26252] should_fail_alloc_page+0x50/0x60 [ 1478.576343][T26252] __alloc_pages_nodemask+0x1a1/0x910 [ 1478.576359][T26252] ? kasan_slab_free+0xe/0x10 [ 1478.576373][T26252] ? kfree+0x10a/0x2c0 [ 1478.576387][T26252] ? tomoyo_path_perm+0x24e/0x430 [ 1478.576400][T26252] ? tomoyo_inode_getattr+0x1d/0x30 [ 1478.576425][T26252] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1478.665099][T26252] ? mark_lock+0xc2/0x1220 [ 1478.669546][T26252] ? chmod_common+0x217/0x460 [ 1478.674284][T26252] cache_grow_begin+0x90/0xc60 [ 1478.679206][T26252] ? trace_hardirqs_off+0x62/0x240 [ 1478.684574][T26252] __kmalloc+0x6b2/0x770 [ 1478.689148][T26252] ? mark_held_locks+0xf0/0xf0 [ 1478.694076][T26252] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1478.699836][T26252] tomoyo_realpath_from_path+0xc5/0x660 [ 1478.705834][T26252] ? tomoyo_path_perm+0x1cb/0x430 [ 1478.711038][T26252] tomoyo_path_perm+0x230/0x430 [ 1478.715908][T26252] ? tomoyo_path_perm+0x1cb/0x430 [ 1478.720979][T26252] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1478.727253][T26252] ? is_bpf_image_address+0x1da/0x290 [ 1478.732696][T26252] ? common_perm+0x9a0/0x9a0 [ 1478.737424][T26252] ? stack_trace_consume_entry+0x170/0x170 [ 1478.743368][T26252] tomoyo_inode_getattr+0x1d/0x30 [ 1478.748601][T26252] security_inode_getattr+0xf2/0x150 [ 1478.754062][T26252] vfs_getattr+0x25/0x70 [ 1478.758446][T26252] ovl_copy_up_one+0x28e/0x1860 [ 1478.763321][T26252] ? find_held_lock+0x35/0x130 [ 1478.768376][T26252] ? debug_check_no_obj_freed+0x20a/0x441 [ 1478.774127][T26252] ? ovl_copy_up_inode+0x600/0x600 [ 1478.779520][T26252] ? __kasan_check_read+0x11/0x20 [ 1478.784590][T26252] ? __kasan_check_read+0x11/0x20 [ 1478.789922][T26252] ? __lock_acquire+0x1af3/0x6320 [ 1478.794982][T26252] ? __kasan_check_read+0x11/0x20 [ 1478.800241][T26252] ? __lock_acquire+0x8a0/0x6320 [ 1478.805226][T26252] ? __kasan_check_read+0x11/0x20 [ 1478.810343][T26252] ? __kasan_check_read+0x11/0x20 [ 1478.815534][T26252] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1478.821285][T26252] ? dget_parent+0x1a8/0x560 [ 1478.825913][T26252] ovl_copy_up_flags+0x15a/0x1e0 [ 1478.831043][T26252] ovl_copy_up+0x18/0x1c [ 1478.835317][T26252] ovl_setattr+0x1ce/0x930 [ 1478.839762][T26252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1478.846027][T26252] ? ovl_fill_inode+0x620/0x620 [ 1478.851004][T26252] ? evm_inode_setattr+0x70/0x170 [ 1478.856395][T26252] ? ovl_fill_inode+0x620/0x620 [ 1478.861389][T26252] notify_change+0xb6d/0x1060 [ 1478.866093][T26252] ? audit_init_watch+0xd0/0x1d0 [ 1478.871224][T26252] chmod_common+0x217/0x460 [ 1478.876109][T26252] ? perf_trace_cma_release+0x340/0x470 [ 1478.881927][T26252] ? vfs_fallocate+0xa50/0xa50 [ 1478.886877][T26252] ? strncpy_from_user+0x2d1/0x410 [ 1478.892045][T26252] do_fchmodat+0xbe/0x150 [ 1478.896404][T26252] ? __ia32_sys_fchmod+0x80/0x80 [ 1478.901515][T26252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1478.907362][T26252] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1478.913451][T26252] ? do_syscall_64+0x26/0x790 [ 1478.918410][T26252] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1478.923882][T26252] __x64_sys_chmod+0x5c/0x80 [ 1478.928507][T26252] do_syscall_64+0xfa/0x790 [ 1478.933204][T26252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1478.939280][T26252] RIP: 0033:0x45c6c9 [ 1478.943302][T26252] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1478.963393][T26252] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1478.972122][T26252] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1478.980112][T26252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1478.988226][T26252] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1478.996367][T26252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1479.004607][T26252] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000e 10:11:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x8]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:18 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) 10:11:18 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:18 executing program 1 (fault-call:6 fault-nth:15): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1479.315986][T26264] overlayfs: failed to resolve './file': -2 [ 1479.338282][T26263] xt_TCPMSS: Only works on TCP SYN packets 10:11:18 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x40) [ 1479.390336][T26260] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1479.483943][T26315] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1479.501012][T26305] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1479.526653][T26375] FAULT_INJECTION: forcing a failure. [ 1479.526653][T26375] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.594150][T26375] CPU: 1 PID: 26375 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1479.596478][T26377] overlayfs: failed to resolve './file': -2 [ 1479.604559][T26375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1479.604662][T26375] Call Trace: [ 1479.604689][T26375] dump_stack+0x197/0x210 [ 1479.604714][T26375] should_fail.cold+0x5/0xf [ 1479.633173][T26375] ? setup_fault_attr+0x1f0/0x1f0 [ 1479.638241][T26375] ? ___might_sleep+0x163/0x2c0 [ 1479.643300][T26375] __should_failslab+0xb7/0x100 [ 1479.648195][T26375] should_failslab+0x9/0x14 [ 1479.652956][T26375] __kmalloc+0x2e0/0x770 [ 1479.657270][T26375] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1479.663453][T26375] ? ext4_find_extent+0x7e1/0xa50 [ 1479.668693][T26375] ext4_find_extent+0x7e1/0xa50 [ 1479.673774][T26375] ext4_ext_map_blocks+0x1dc/0x3ac0 [ 1479.679084][T26375] ? mark_held_locks+0xf0/0xf0 [ 1479.684092][T26375] ? ext4_ext_release+0x10/0x10 [ 1479.689195][T26375] ? __kasan_check_write+0x14/0x20 [ 1479.694765][T26375] ? down_read+0x109/0x440 [ 1479.699209][T26375] ? down_read_killable+0x490/0x490 [ 1479.704658][T26375] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1479.711016][T26375] ? ext4_es_lookup_extent+0x426/0xd40 [ 1479.716532][T26375] ext4_map_blocks+0xdc7/0x17e0 [ 1479.721426][T26375] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 1479.726866][T26375] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1479.732778][T26375] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1479.739013][T26375] ? __kasan_check_write+0x14/0x20 [ 1479.744148][T26375] ? __brelse+0x95/0xb0 [ 1479.748340][T26375] ext4_getblk+0xc4/0x580 [ 1479.752699][T26375] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 1479.758475][T26375] ext4_bread+0x8f/0x390 [ 1479.762905][T26375] ? ext4_getblk+0x580/0x580 [ 1479.767756][T26375] ext4_append+0x155/0x370 [ 1479.772425][T26375] ext4_mkdir+0x61e/0xe20 [ 1479.776902][T26375] ? ext4_rmdir+0xd20/0xd20 [ 1479.781851][T26375] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1479.788355][T26375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1479.794629][T26375] ? security_inode_permission+0xcb/0x100 [ 1479.800512][T26375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1479.806957][T26375] ? security_inode_mkdir+0xe4/0x120 [ 1479.812737][T26375] vfs_mkdir+0x42e/0x670 [ 1479.817188][T26375] ovl_create_real+0x287/0x420 [ 1479.821992][T26375] ovl_create_temp+0x48/0x60 [ 1479.826622][T26375] ovl_copy_up_one+0x7db/0x1860 [ 1479.831826][T26375] ? find_held_lock+0x35/0x130 [ 1479.836856][T26375] ? debug_check_no_obj_freed+0x120/0x441 [ 1479.842905][T26375] ? ovl_copy_up_inode+0x600/0x600 [ 1479.848059][T26375] ? __kasan_check_read+0x11/0x20 [ 1479.853325][T26375] ? __kasan_check_read+0x11/0x20 [ 1479.858385][T26375] ? __lock_acquire+0x1af3/0x6320 [ 1479.863573][T26375] ? __kasan_check_read+0x11/0x20 [ 1479.868627][T26375] ? __lock_acquire+0x8a0/0x6320 [ 1479.873737][T26375] ? __kasan_check_read+0x11/0x20 [ 1479.878994][T26375] ? __kasan_check_read+0x11/0x20 [ 1479.884245][T26375] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1479.890181][T26375] ? dget_parent+0x1a8/0x560 [ 1479.894800][T26375] ovl_copy_up_flags+0x15a/0x1e0 [ 1479.899939][T26375] ovl_copy_up+0x18/0x1c [ 1479.904202][T26375] ovl_setattr+0x1ce/0x930 [ 1479.908846][T26375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1479.915231][T26375] ? ovl_fill_inode+0x620/0x620 [ 1479.920230][T26375] ? evm_inode_setattr+0x70/0x170 [ 1479.925280][T26375] ? ovl_fill_inode+0x620/0x620 [ 1479.930156][T26375] notify_change+0xb6d/0x1060 [ 1479.935030][T26375] ? audit_init_watch+0xd0/0x1d0 [ 1479.940165][T26375] chmod_common+0x217/0x460 10:11:19 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(0x0, 0x40) [ 1479.944700][T26375] ? perf_trace_cma_release+0x340/0x470 [ 1479.950571][T26375] ? vfs_fallocate+0xa50/0xa50 [ 1479.955617][T26375] ? strncpy_from_user+0x2d1/0x410 [ 1479.961097][T26375] do_fchmodat+0xbe/0x150 [ 1479.965638][T26375] ? __ia32_sys_fchmod+0x80/0x80 [ 1479.970858][T26375] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1479.976599][T26375] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1479.983049][T26375] ? do_syscall_64+0x26/0x790 [ 1479.987867][T26375] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1479.993186][T26375] __x64_sys_chmod+0x5c/0x80 [ 1479.997944][T26375] do_syscall_64+0xfa/0x790 [ 1480.002484][T26375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1480.008576][T26375] RIP: 0033:0x45c6c9 [ 1480.012502][T26375] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1480.032284][T26375] RSP: 002b:00007f03f88e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a 10:11:19 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x4, 0x68800) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x0, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000600)={r3, @in={{0x2, 0x0, @loopback}}}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1480.040724][T26375] RAX: ffffffffffffffda RBX: 00007f03f88e66d4 RCX: 000000000045c6c9 [ 1480.048912][T26375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1480.056901][T26375] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1480.065046][T26375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1480.073178][T26375] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000f 10:11:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1480.197391][T26384] xt_TCPMSS: Only works on TCP SYN packets 10:11:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:19 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1480.503093][T26488] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:19 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(0x0, 0x40) [ 1480.575572][T26593] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x10]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:20 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xf89a155429c793a6, 0x0) sendmsg$kcm(r0, &(0x7f0000001bc0)={&(0x7f0000000500)=@llc={0x1a, 0x13, 0x4, 0x7, 0x0, 0x8, @remote}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000580)="81ac6f8ab21ead11b99c25a0fbbee4e5eae818dac0c3c490785cad0aa5d3489041c9b84e5bd9e06567bc09ad480ee55911329f1c7bc9fa5ee857bfdc7cf4bb72af", 0x41}, {&(0x7f0000000600)="e95c153b7b374c15b75041ec5e6140e5fff8077892216238c3d6726d93348c4707bd75836e4f76275893de98ae87d81be1139fb5b4f3d8df6eb093c92a54113c3b865bcdebd8cd27334f78585cafbb51295e4ef4739fbae509c227595117977b10362f5d03f009f790b70082263854dccbcdec9c2f9c307119d8863e112af6ce3d0796a2fa0664ba8c4ee069ceeddde0d81486fe891fb473d37c70f73fb9b34ae2569165119695075317cbb4733b73cabf34eb4f7625d5f8ed0b9b3d4c64dc0015842ab68e6b3613658dc3b98ed798d14f9f148f1adc4a37787c56010aad5a3d9bf6c8357bb3c3570703", 0xea}, {&(0x7f0000000700)="d5db185135dd192f08d308d79ea972cb26bd70da12ca6b8a5dae7e9d2567a2c0ec13429c961de5a5c1385ad3194f0acd51919e13fb3dadfa9d170e8debdc8e9d9a682cac0c02b4b2c4349de5b22192a0933a2c50cb85150274b4cd6d09a494a548a78b59bb9818df7ba7819b353ca2711d7d26431e2bf4a2f39558745249584168b45fb3d46b25731d743e7da9b5d27d65c5e509b07d50e3", 0x98}, {&(0x7f00000007c0)="03f4f4bd6010c7a822f1d2bca7c0eaeb4108f410ee19806ef214c111a91125ccccc9a02a6598f6a3f7ab37f652deb31e957f0268000d947438ee4c48fb60f7705df38c16fa6e0bc7fb6545b9e994087e3903e93c055f276fd0d28e9c60d662358310bfdda96640b465aa9f224ab4eb17377c1abcfd6807bbf1079ee55bd5c3c0093f0ccc03289de6cd254c6c5ccb9170494467e94f3077c5604aa8d681ca623319b7ff3af2e52b5262d88bb609a7a7bde1d67c1d5755e8c4068c716971bb717caccb0b33c440afb6f54a2a6e6cc15130c2297c540ade3291e86ff7144f2b905fd2dd219b03b2037c1f4b97bd15052b582ee7c0dd8dcdafbb1c2858d974ea45ccd15b42645a5580a7f8a9663143bbba853397be1f12714c032e7dbfbe9574e81e3aba6150c0a96aa9cc400934b164f72f8ff322f142fc1407da26083ae65cd543d5960128a054e96041248b7ce52cd11148e4329d41f13c49cf910740c04d4e95cd196db72ae33fff8356d117bb154a35b2f308fe975db1230af610b1b9e0bc3f2f03308ef87132c7f0dc57140a30ceb1cba47d5830e029b26af8dcdad792dff7fe0cfef6c1e701c66575dac2b2cc02daaf6fb909e84c23c7482b0e076acdffaec0bc9f14f3336e3afae3a5a17145c3481a553dd75981b08ac9c0b6b4cb1b40ee562acb3c411d20cf2705549cd58786647921e7efec945117785df8915a2d13b9440b755d77f6fa5bc81fdd0a9da8872a7ef2ede2f79581d0737ebf68a6f889278fd82c6367bafda6bec7969e393cf68353765cd36e3dd0aec8f734ac2746bc6b81d94c635af65bc7dc454c7b585a9a52ec8a697e8e6639f310bf756e57fcafd5063da292ae09995f3ba24eae00ab38909dc1295cd1aa51311444677b29e1e216fe531e6d978e00a8ce41ec638f6cff51be326b309b8ce56bb53d25527502a12ba557bb77c63ca82417b0b1c56fe01118fae7490455e856d199f3113a99150185ea6e4c636f28018872e84e59bb56e5362bdb799d7dfaee5f4198c801773505cc8827224100f6687db0152c137f5d8b8a33be131a6cb8e38119d0dcd56737bb9f1c785cdad518e6b4f00314023902eaf58fc029ccb360ba00e83a894ec60f2533f58a25b222a74b771b9dec2b2af7284b500b2c3641994ce515b5dbe5c9ca9bc9607511608672baf0f95fb54ab1539feb5242b7da3109b278ef351fc0659d266bae2eeec3d40e0d329d76f0b92a1182e36dc45cb504fa0cc7dcfa60e323e8c9724afe12e9063b541e721d7918e02110710a21456169ab95dbcfd77bd2bf65afd4e8c05a0c8585ec279040b90a7e4714ea10d7f5fc68038577b61ef07213be75de31689e74e795e8d9276b0bcc4fe34ab479f26de4c0204b0b7f8299073a7895153a5c6a710eb0c1de3c99add33245e6d171057f532229a9d2758cf004a55e54899731b4d5026e7f48f6f3928fa169116a0ed5814427f8e02fdffe0a7ed038b1abb12fd51cff219ab4e38edbfb938a583f8933627f34d3311537d151b8476be67f751c486d53626874ea6951b16d502e14eb4864fef5d789324df2f10f77c50ce3f7c79f2ed02b647b98cc3fbc69edc7a55e9c11e55856df80b05cdf97b1b33912bc9927c46f01a1ca8f72999a201a6c1ce9a6d18127d6ea1d16a6caa15f9d8c924b57859f58c47271201b52d42d59b79c5f513ee972be78fde605af10072e1c1a27b26aa3050162c11905cdf11d4b4e12a05bc46f1e39c7fc1e8fe734ae31f94907985f0572c1c9194c6be6297339ca5347a58c06fef31b771b61ec22d5d3718b282d7d468fca4ec08327525fe4b7764f70e0360abd583f193c072e2ca4a3effcd95b39f16d288153172d58c6d4b56fdc862acc5217ee80dc4dab8f53309957e066ab7462769c50e12b63e4d015d2f5193d8936b52636e38244c63fb9e929ef4a8c47223917db8b793661f42b1261ba9ca42194528f8a2c4db5211b06cc8e21bc30834e348ca4cdfb1d9d880a8edaff8a1de8cf695dbbe6b6806b586364bbe4cc91fb0757f3e1c7e37dcbf07bf4ff89dfd40231b6a80a3d61a640dcb87153c566cb4d1413f780f01574d7bfd92289128ade84676e9e12c93fbb79e8f1dae6be9811b245cbab7358391a98a8c755bfa3046a4cf9c8b0079d98f0c83ea58e230eb213a2b1118beb1bacb8d56c6b69eabd82631e29e549154105df749a651e5995a8b80f551d9fa632678547d47d0fee5769ef473ffa12b83300d6b034933f69caa938f19cda02d9ccbd75fa7fc199176ac9e6e6ff978b1f6fc66d1b678a2f6a5c8d4bf25e3823a67fda76d756e122fa94fd200d8c4932f80a6a7841e0c463c30d6ccb793d9473293f10db911dae9024ceabef92038307beb904cc6f55cf75755974a6665622ccc62fd120d11cc6b393d0cf15f6fafc2f7c1414d66edb684001e380a7743101e20d86d62de6fc46a638f92302dc336d69d700a172536e718d5b9cce230648d7703fdd58b25414090c4603a73fe3336ca295906edfe4390765e251ee5befeb518d2279beb4439c6cff46bf6d03528b24d004e801b267e573998605e535cec12fe7acd65b0aac65b8b06c6c36037c7e735766a351f66c7c82af09375f024e4cb1bbdbd27f6cbcd9a8cc09bd124fc5f79ace1e50e81f621d55950ba393f6632c8e61dadff2eebf7b4c42a6bacd6e81fc1c9163c0bbe2a403fa8412f76d5859fef971b34b2298d108b47ad3a0949797cb5582f4058dbc6ae44e48e804355764f4791f579fe468b13f6ba16b8f97fedd1b7d59b04973985f8a05f0a2de5d16373011d8bbf64b76ca99edcafb9e87a23cc6c08c0f5a3bf748edc9d4c8f529a75110c01136d21e3efa5efd4b8ce6b9b7f370a69357f65dc30bb779c4f01395a2473b264e69790d3ad0602e07eec226f08da6945ccb8420fe91fc0dbfc4ac8abb186683a4c01a5cd9714008fdac11e3699c3d6042b1ec92d5f39e3f9e6e057de948472ae7af9fbde99e33d241520da2abfb17fdb85974c348ab6168ccdbbbd1b400d78385e9ca08bd8bcd873f538d07b1204976a4a3dfbf66882599a6d74f72dcc39f9bc3c4cb4502b62212e8dc7be6b5985310b1a5b421d2cc64471e457cd8853372ce2e4fb27b883b2c7e65b2b1eb1b56fc80988e1e0c00d03c6fd6fef8da895d163f24d88abf4bee41ad00849ffe6ba2816209e3266e8c568ffdb1d7676900dfd03aeacc1f35cc15f77deda374e5bbaad4177eca3b9f8d94c9d472a5008c1f0e163c6cc228172fe0d26a0c95c0288b9c436aa3637e4f7c1539a130ea6f699a228f89a1e2a1b206fbd7a346b9e8ae67ef85cf5aa4618cb047e2cd64997a35eab174ada01f099ee7e9fcab85a21645611cb5eabf771e7fa223a698b493406991974da52032172907e41761ae8b48bf243f24a7876eeb7c70a3ff670e4438c2d5735030227bffe96ccc40d606120e53ef5b37f6026615c1b17e39d11b203b7d3502490fec842420deac753050dc57cb9e7dce40ec7f37d1dea590c2890945a74e48e55e5a78810ccc7c1c7e1690cb665c8679a7a2e4936d644ee8c5bff7f2f858699cf3165505be3f940b09d0516bfe01cc35522fef59dba0b1633f66f1d8cb4ab023f36f1eafa351cd006b3f013cff6a3b8c6fedb636c176bae5c20deaf2d760bbae1b2599aef41a1603039dce7111a561e21b98fb1e99faf4c4ac6c3ce28fff77b096062dc3a0870e452e5a4a5332285a580704967ccdaa9f62c19b9937b88c9c430453398458500351ae8776b931f7382baa70a45215ba04f2d7255a1604d78ac3c868a2cac5eeb1abfd131f28a25f12d392e10f0ed4dc0a0bdf450c90f79b37851ea6a224ff60e5517b2329c2e7794c00026860476dcb4014410c0cad0ccc7500532ab788f45dab2dcf151710f7c797be8a023937e794f216c2566503a72afc223d6b6d2a96238660d1a23bdea790ac7a4d98cb77d88ba3dc2a4e4d2af032739a63a1e16be216cd30c8f217dcf4224630bc828d2ab0738d3dd66a38dcc65c807ab048787581afb867e646ace95d7ae11eb8ff4b083a4ba913b4da043772f1759ccce8b731ebaef271b14fe0219e39d48f2f6141cc513451e3b7d35bd773403e97c4c92dadabae7c096f565cc1c255cf06e767d189006d89a58198f6e0545386c1cc8d1256591091a739900e097ef45c5a1d6dc92f7b0dd17f0f978e541254d3bf73b1ebadf5bdd9b591815b51f11451214595c422c622077e050f6393547ec7f120347f8a4e52e3a1c3cd55cbd24cf11d88c21634f8985c133c144dd9e56a17c8e1050123a3b4d4c81cd564b8f20261f224a3812fdc155d577cf2deb913aadabc67d2bdeb558500d42c06a619c86e00b487e3d9b24988a68fb9d237be2b3d07a58b340399f72c8f0c5367359f384cd6281c95dce5dad0987d27de38a542c716d5340d040a48cf57b3e4054603393e26c8cbbc4292d19d1132d7a328ac6c4e5dc7fe4d11e51d1f35bd22b9105a41aeccae847a00ee2465943e165a4833227d04eb2c8115c6a317708d424f0a0885b535a25ac8abac514dd53e1475739d09f6a4f3614b3169b68a52ffd95aebc07d6dacdac40a2db95794209a512ab914de8d5855747f1a1c72ca73b5067cc8948a8daa7262c48795445345bac71de459a25d0fb9852a8ddb22a9445a265b3cef38f83eaaaaf013d500aebfb40d29655b5429887f99c6c78090c166d87aa6b5c53360aadc24c8192ab7959942e038b4b2e63e6e54df3f6bce0ff5b576a4d0e22f86c3fb91a7c46ceb2ee9425262b96adcc9356f13938ac0730860316a2063bce036ef42646dff84dc95ecab8202322f3735add98a6aad2824a99ecdda24ef801dceb27f194a8b78c158ab5c0b275b95d7b6c2287df7fcf0829edccd7a85c343a5ad049bbcea788950114d2a256846877cfafb52028a11f9965a44bf878df49611d7dd85d355a317829e086d09d334315e01bc0470a4f2b8d967d49e8ff0adec7b6aad943fbd45081b8afc6ff54efd5c1de8104f76ff741be0a6d6fa7e4ad527624dffb72d274e5a08e8f32954f1b5b04f430cb8b25b969e0993d9645136687a576fa64acd155de98ea297406ce7de390a44fa52ca11a452687c9b365c0f360487fed75bf716f57364666c08f18bf2aac89a9e8bdd97a8e8109f03b15f27c6715ddf2a2793b615b99c8866b8ae5dfe1cd08b10aba9362aebd96196c1d888a84cf8a53661616d436072ac502d86ad5cadac5ad5570a4e4d256feee8b7af735cface248cea4512d4e1ca52375af558bd69866dc3d9d0c9ef82d22069010f2aae4ac0bb20c41dbfcca4cb336c76972ab6a1036035a58320668835a1d3c590c3e38e730dcd6b89eba5e1dc3ffc12b5e938e00ef96e99c0c0d30bac32fb8ab1445805e2d31eb2a93fab206c2d7c140ef3be723058f2f2197858b811933af302aedc752dbdefe67cbd8950f69db373b67bef7d58e4c7fbbe4c2f7a5b58164d46e8b073c397ee6cb48f983a97bbc155fd7af38fa6e40d91e022a3d0950eaac62f4dc8e1e3c0d94836cdaa7de8bf5fb7bf888d22c68668aac15a7e954a5eef3f325412c34f3035edd0715054a36efbd8a1113d5a3337148a41a0d911706762c6d2578f8b346f5667ffcfba395359313a1969de39c303939f7dcfd247ea2b84a27a58159e9f75af2746d04ecb18becceb03425ae67f6e95ab2ecae7f04d6901479b86abd46fb5df4eef0f9928e0e0fddfeceb58bb4535364a6286dc2780b90c7698782dde8e12952a84384a231dfa5d20f2f8ccd5ffdd", 0x1000}, {&(0x7f00000002c0)="ba38417bb1ed03a2038ad04a0ddec547bc90db57190144c636e03b76eac2608b6f7562b8ca3b436364676ae7067807b904554a0558c70b9b4345ce5bd4", 0x3d}, {&(0x7f00000017c0)="29aa78e16db640a0d2a156dda59c3bb92f7cacb88937feb8e4fe1725ef788ba3cc6cb411c123b0ed2803e4926cd135bf1f430c37e29e5b27118d1d084a8200fe74c4b8d13ea558e7d815c4590a920ba136143d78dc705451c4025725d2fb33fea7b7cad8560b9162e0da3b18", 0x6c}, {&(0x7f0000000400)="5693896fd051e332ff7974e529b020585d70bb282dae7fa474ac8e538bb5d0f618722a599d9d97", 0x27}], 0x7, &(0x7f00000018c0)=[{0x18, 0x112, 0x4, "16c997ad5348e527"}, {0xc8, 0x116, 0x8, "1301cf56e2b34b51eb66f473bb1d4487fb6c4ba0428d9020a243df095f0375e827842d59a48d307fb262e6ae44c57c2bde9107aac5544844554b4c305052a2b4ddf02c9c45766455a039c88c10017d00e27950f34927a179878fa4174a17a65d81c5335e45d1afcf98b5b311e88d40f37c39ad955a2cd515d6f5492d1c6251c435da2cdca55cc95a688f82ee999f644e2fe444d88551b4f6b7379097af5b749393a2d3db67bca9679c732d4506aa4b23a3a0a119a6e518fe"}, {0xe0, 0x11, 0x3, "1aef02a1c28198ec81d428d3cdc0901686123dc4165f9ef0caadc55f97298721b6b206c28a9f401197f1839bc1ff6469df848268c684ac0cb9577688624804b1163182a92b72729d4b307e53d3fe5a8e59e4f48229fa783236433ed4db1073ffafa587c1fb26cbd00dc7faad6d7630c30bd92d134310cea1717fd625a67a0aca7c60650b8a7e8eb8d22958d10bae2a7569597bd388fa80247213b02efcda21d5711cc94805c79ac44add59c6c9946024c8be2e90df8d95e07143ec3fa6413842708ed0d11697766264be"}, {0xa8, 0x1, 0x200, "d8399ff82c59cb2889a6e0269b5c23613a1090c82bd334757532456245a255a2a9f2bf3382215b85a031cbd5908abefe6d5d3662ade8fbf21dd4950d93b7570cc5e060b56b1cb728142f450e98609d658f66969d3c816ef9cb7660cc1cabe247ab2ffc773254b62ee1dca83bc2b8abb471224fdf6dd96791f16d9b97569ac830d59f4fa4b6315907ceca1e334a53d6a2f26b6c82"}, {0x30, 0x88, 0x1d97, "984b05fe25ba3f305b5951fb6bdea788edef3d285e13628844ddaafaecef3ad1"}, {0x38, 0x102, 0x7, "746074972d30f4b5f7476c76b3aa5969a70a79ceaae1cfaff0188e7d6d4b5f0f91ef7c8eb5"}, {0x30, 0x84, 0x9, "156be3c392b5113289097e3435840aace2037b29ada4dab6a0"}], 0x300}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) listxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000340)=""/117, 0x75) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0x2, 0x0, 0x40}, {0x801, 0x0, 0x80000001}]}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000240)='overlay\x00', 0x480b804, &(0x7f0000000140)=ANY=[]) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) readlinkat(r2, &(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000440)=""/175, 0xaf) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:20 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(0x0, 0x40) 10:11:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:20 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1481.125238][T26605] xt_TCPMSS: Only works on TCP SYN packets 10:11:20 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000002180)=""/152) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1481.390480][T26714] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:20 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000980)={0x100, 0x7, {0xffffffffffffffff}, {0xee01}, 0x4, 0x4}) setxattr$security_evm(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='security.evm\x00', &(0x7f0000000b40)=@sha1={0x1, "c7816bc4fc55b00b82029c423fb72fb12fc11679"}, 0x15, 0x2) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x7, 0x9, &(0x7f0000000880)=[{&(0x7f0000000140)="6422b3f7e376f06e1af9", 0xa, 0x6}, {&(0x7f0000000440)="fb4cf59ba4939964f76bc2e2f8ab9f15b13ef3c04e6ef4ccd41e15f315e6496528e30c7cdf002ca337e0ecd0449de4d89c97377d0c6654face5bd6bde6d00975ab21a551e671f3b9e0eb0f2f9764c6db0c1d28d5a7646750384f39c08844a9c59524472418ebb47768f772649be07480fab5ded1a9c3eef69d800546f018c74c08f06504e62108fb581abbfca73e1080994bbbdd9d3dac8cb9de0dd79ffee48232957c1c3b9e068981397f3548e8c43da5ac0a7dd8df5497918516f7f42295f55cd3103e7bb6f56b05b8957351d7a18269f1c9b81c12a8", 0xd7, 0xffffffff}, {&(0x7f0000000240)="04e09407408e6fc80fa7e759037c537fe051534e0b4fb09340908e5c7f8e8e0585b0f4367b17d8e85bf7258afefc25157a", 0x31, 0xfffffffffffffe00}, {&(0x7f0000000340)="3014b1ebb2893c098949e56e39a56d5e37dd8751c0d1ccd82fa60de17e5dbef284479632cfe4443a70712f88e07cd4902dac2a2c8a8968f1bb05676967c71b4690fcb601465e78a50a0dda7367c4c8bc6aa1ef9734988edd7226499fa0b09be310a57927c6d8640e2b1899b64038b179cbc3044d57c9282106d341a04b5109eab02f6d14cc19454a7eec4623e4f576fba28763609b8184ab53e8170656ab33233da0", 0xa2, 0xff}, {&(0x7f0000000540)="93fd1ed1e065ecd5888bb93eab7f5e99651ea18df54b4948784d59750d8a4a470cf2c62915313fdeeb662f83e66ca35ebe3e4abdba7c00e57aff233ec22026790d1c3be18727eb1e0d3808c42ecf9c9abd9d1913ff8622f831a40a82902cbc76abeb9b31a17a04fb8605dce7cab59be07e43bb29bbf472cdbdaeb994db6a241a914b4ca331d49251fb5583db27b161e049817102f51b61f30228d77f04954f9fcc60d389fd3e3b9bccb3845239f37801a74785", 0xb3, 0xffffffffffffffff}, {&(0x7f0000000600)="a50abd7252edd6809c6b27ad8951c45d0fe11b916d93849b", 0x18, 0x4}, {&(0x7f0000000640)="796f790878c6fa803760398215f64821ea411af1e353975b342e3683e63128f5c0c8a8c43f9d8f6f4e1d97bf1e14e0c1e3b10ed16cd7aa307d2318d17eb321917b1f4292a16694be385c899c8a5ac811981552aac8f6d3c5d0d301b42f24601efbac9f220aa9e73f77caf30265c52220ac2ebc9bff7a119ea251d87b4981136a0c1903aa859205c255ae86505ec37b9b95d33bad3e64875d5a5e3cad2af12c8ae670ef0b430aa88eeaa383be70c54c9d000de3e7b9d4aed1dbdbffb063205681067712a3c939c9a479968df31786097cbb782b4d03b1958ab975ba12f0264d55ef8ddb83d8e73b4db5e4109959a2aa268cf0d4b0ca54d14b95", 0xf9, 0x93}, {&(0x7f0000000740)="80534a1a4d0f592c3c1b8bc85803616a2a7f70e12ec19c7df03538163da6998f4b27cc56bb5b24f199d8727e65c1839d3bce0ede3e3f0a312d3d3846dab826f1dc276a2317e2e1f7eedcd5cb0bebba9d2515d341b2e6c8230db9099f27e156e3933ef0ebdac83bcb76881790bfe2a2a700883a110092739a0893622cf3f65dd4d7a54e93782f7083b6c550d20ccda8b7996143ebb1a7504a", 0x98, 0x100000001}, {&(0x7f0000000800)="85f44b574d866f8f7b8b15575c0ecddc92690148f34ba42084a3ebc570dcc22d0961c7f1e9b26202ebcf70595e453546ae3e86d6e2b7791cafec492b13ff4ca5e8c3af9c31bc5aefbf0d762c2a3dba437663572af77770d98266165064bb", 0x5e, 0x10001}], 0x100000, &(0x7f00000009c0)={[{@lazytime='lazytime'}, {@ikeep='ikeep'}], [{@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'bpf\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r6, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendto$packet(r1, &(0x7f0000000b80)="a81ca39b1c65ebe3401a1308ce4883c74c4d840952bfddfb012a2d12d8a988a21660286196dc8482dc96670b8b582438895c4709a1b670d27ade93face1365b02ad707ef61de6da104922a1e564e0224e7a673facbf928f2a78dbe4af74be3c1e25a584a72a59fadb15ac3b9a3f1a5f12f3c9b5195a003078a2cac1da98e3505216f3659ab0b08bf9131d53f760ecc81f71ad53c96", 0x95, 0x4000010, &(0x7f0000000c40)={0x11, 0xd, r6, 0x1, 0xbf, 0x6, @broadcast}, 0x14) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') syz_genetlink_get_family_id$wireguard(&(0x7f0000000a80)='wireguard\x00') [ 1481.502949][T26714] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:20 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x2) 10:11:21 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0/file0\x00', 0x20) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000080)='./bus\x00') [ 1481.800967][T26822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 10:11:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1481.850171][T26823] device veth43 entered promiscuous mode [ 1481.939361][T26824] device veth43 left promiscuous mode [ 1482.012020][T26831] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1482.025327][T26829] xt_TCPMSS: Only works on TCP SYN packets [ 1482.040731][T26832] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1482.062362][T26822] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1482.072301][T26831] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1482.132601][T26832] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:21 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000340)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1482.436135][T26939] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1482.534604][T26940] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x11]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:22 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3) 10:11:22 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfff) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:22 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x2) [ 1482.972790][T26943] xt_TCPMSS: Only works on TCP SYN packets [ 1483.080317][T26947] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1483.095621][T26955] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1483.182873][T27047] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1483.212334][T27018] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1483.217974][T26955] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:22 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdzr=./\bileq,upcerdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:22 executing program 0 (fault-call:5 fault-nth:0): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:22 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4) [ 1483.547645][T27162] overlayfs: unrecognized mount option "workdzr=./ileq" or missing value [ 1483.610562][T27165] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1483.614841][T27162] overlayfs: unrecognized mount option "workdzr=./ileq" or missing value [ 1483.636484][T27166] FAULT_INJECTION: forcing a failure. [ 1483.636484][T27166] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.676222][T27166] CPU: 0 PID: 27166 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1483.686145][T27166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.696205][T27166] Call Trace: [ 1483.699518][T27166] dump_stack+0x197/0x210 [ 1483.703878][T27166] should_fail.cold+0x5/0xf [ 1483.708483][T27166] ? setup_fault_attr+0x1f0/0x1f0 [ 1483.713536][T27166] ? ___might_sleep+0x163/0x2c0 [ 1483.718415][T27166] __should_failslab+0xb7/0x100 [ 1483.723278][T27166] should_failslab+0x9/0x14 [ 1483.727797][T27166] kmem_cache_alloc+0x2aa/0x710 [ 1483.732659][T27166] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1483.737959][T27166] ? wait_for_completion+0x440/0x440 [ 1483.743268][T27166] getname_flags+0xd6/0x5b0 [ 1483.747803][T27166] user_path_at_empty+0x2f/0x50 [ 1483.752779][T27166] do_fchmodat+0x9c/0x150 [ 1483.757129][T27166] ? __ia32_sys_fchmod+0x80/0x80 [ 1483.762075][T27166] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1483.767662][T27166] ? do_syscall_64+0x26/0x790 [ 1483.772353][T27166] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1483.778544][T27166] ? do_syscall_64+0x26/0x790 [ 1483.783243][T27166] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1483.788554][T27166] __x64_sys_chmod+0x5c/0x80 [ 1483.793163][T27166] do_syscall_64+0xfa/0x790 [ 1483.797699][T27166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1483.803608][T27166] RIP: 0033:0x45c6c9 [ 1483.807509][T27166] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:11:23 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="e297af6edea93d6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f83b2b866696c65312c757070657264"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x1d0, 0x400) [ 1483.827219][T27166] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1483.835644][T27166] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1483.843628][T27166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1483.851610][T27166] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1483.859599][T27166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1483.867581][T27166] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000000 [ 1483.890925][T27165] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:23 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x5) [ 1484.047298][T27171] overlayfs: unrecognized mount option "â—¯nÞ©=lowerdir=./bus" or missing value [ 1484.135721][T27171] overlayfs: unrecognized mount option "â—¯nÞ©=lowerdir=./bus" or missing value [ 1484.145056][T27175] xt_TCPMSS: Only works on TCP SYN packets [ 1484.225085][T27191] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1484.306243][T27191] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x33]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:24 executing program 0 (fault-call:5 fault-nth:1): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:24 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ipx, &(0x7f0000000140)=0x80, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0xa8, 0xa8, 0x1b8, 0x1b8, 0x1b8, 0x368, 0x368, 0x368, 0x368, 0x368, 0x5, &(0x7f0000000340), {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x18, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, @port=0x4e21, @icmp_id=0x65}}}}, {{@ip={@empty, @multicast1, 0xff, 0xffffff00, 'virt_wifi0\x00', 'geneve1\x00', {}, {}, 0x0, 0x2, 0x1}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x3, 0x3, 0x2, 0x1, 0x16}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@remote, @ipv6=@mcast1, @gre_key=0x5e59, @port=0x4e24}}}, {{@ip={@broadcast, @loopback, 0xffffff, 0xffffffff, 'vlan1\x00', 'veth0_to_batadv\x00', {}, {}, 0x84, 0x3, 0xd}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x838a7dbf3379e11c, 0x4, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @remote, @loopback, @port=0x4e23, @gre_key=0xcb6}}}}, {{@ip={@loopback, @multicast2, 0xff, 0xff000000, 'vlan0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x1, 0x39}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0xfffffffa, 0x7], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x6, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @icmp_id=0x68, @gre_key=0x7fff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:24 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6) [ 1485.066130][T27286] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1485.075163][T27291] xt_TCPMSS: Only works on TCP SYN packets [ 1485.117506][T27290] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1485.148055][T27311] FAULT_INJECTION: forcing a failure. [ 1485.148055][T27311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:11:24 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r3}) mq_timedreceive(r3, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000007c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[]) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f00000003c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000740)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000780)={r7, r8, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)={r9, 0x0, 0x9}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={0x0, 0xe0, 0xb4}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'blake2b-384-generic\x00'}}, &(0x7f0000000580)="57b325f9bdea09519583213dcb7c7c5dc2c46a588b5d541107ca572b422f79848c792c9c6cee53a1dadd456f3c50044a852209724c6e2c7b05cdfcb92f96fe5d4a3358d9e90249c21ffe5f30744840dd9c4bec9e47d146cf214e31ae77f54842b69e25e6dd84c2ffc5a267ba3a2aab4d5f401f2589b2ec99071794482fe59851975cff6971036d6af4b5e95ed69f4a4c2af0c845e52834c9d1d2efedd7770bf544ffafc8a50a867d32572a89f38003ce9297415d5219cb20182c37e0749cde8134b5aa8600ee32bced3b15c48249a2830e46f790e787b53cd0678165170b1421", &(0x7f0000000680)=""/180) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r10}) recvfrom$llc(r10, &(0x7f0000000480)=""/255, 0xff, 0x2040, &(0x7f0000000140)={0x1a, 0x7, 0x1, 0x6, 0x5, 0x7f, @remote}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1485.161300][T27311] CPU: 1 PID: 27311 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1485.171196][T27311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.174315][T27286] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1485.181278][T27311] Call Trace: [ 1485.181311][T27311] dump_stack+0x197/0x210 [ 1485.181337][T27311] should_fail.cold+0x5/0xf [ 1485.181359][T27311] ? setup_fault_attr+0x1f0/0x1f0 [ 1485.181378][T27311] ? __kasan_check_read+0x11/0x20 [ 1485.181394][T27311] ? __lock_acquire+0x1af3/0x6320 [ 1485.181412][T27311] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1485.181431][T27311] ? kstrtouint+0x142/0x1a0 [ 1485.181453][T27311] should_fail_alloc_page+0x50/0x60 [ 1485.181468][T27311] __alloc_pages_nodemask+0x1a1/0x910 [ 1485.181483][T27311] ? fs_reclaim_release+0xf/0x30 [ 1485.181502][T27311] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1485.181519][T27311] ? fs_reclaim_release+0xf/0x30 [ 1485.181562][T27311] cache_grow_begin+0x90/0xc60 [ 1485.181585][T27311] ? trace_hardirqs_off+0x62/0x240 [ 1485.181607][T27311] kmem_cache_alloc+0x64e/0x710 [ 1485.181623][T27311] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1485.181651][T27311] getname_flags+0xd6/0x5b0 [ 1485.285299][T27311] user_path_at_empty+0x2f/0x50 [ 1485.290174][T27311] do_fchmodat+0x9c/0x150 [ 1485.294529][T27311] ? __ia32_sys_fchmod+0x80/0x80 [ 1485.299495][T27311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1485.304971][T27311] ? do_syscall_64+0x26/0x790 [ 1485.309659][T27311] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1485.315743][T27311] ? do_syscall_64+0x26/0x790 [ 1485.320444][T27311] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1485.325755][T27311] __x64_sys_chmod+0x5c/0x80 [ 1485.330365][T27311] do_syscall_64+0xfa/0x790 [ 1485.334895][T27311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1485.340801][T27311] RIP: 0033:0x45c6c9 [ 1485.344709][T27311] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:11:24 executing program 5: r0 = fanotify_init(0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_triestat\x00') ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000200)) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/255, 0xff}], 0x1) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f776572777feb3375707065726469723d2e2f66696c653000"/40]) mount$9p_unix(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./bus/file0\x00', &(0x7f0000000600)='9p\x00', 0x80, &(0x7f0000000640)={'trans=unix,', {[{@version_L='version=9p2000.L'}, {@cache_loose='cache=loose'}], [{@fsname={'fsname'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'security'}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000500)={0x1786, [0x0, 0x7, 0x3, 0xf800, 0x9, 0x7fff, 0x3f, 0xd9a, 0x80, 0x7, 0xc55f, 0x7, 0x1, 0x20, 0x401, 0x31, 0x5, 0x80, 0x81, 0xfff7, 0x6a39, 0x3, 0xc0, 0x200, 0x3, 0xec, 0x9, 0x979b, 0x3, 0xff, 0x101, 0xae72, 0xd63e, 0x8001, 0x9, 0x400, 0x1, 0x1000, 0x1ff, 0x0, 0x20, 0x0, 0x8, 0x1, 0x2, 0x3, 0xffff, 0x8001], 0xb}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5ce645c5d8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4800) rmdir(&(0x7f0000000380)='./file1\x00') 10:11:24 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db66000000000000010000800000000000000000000000000000000000000000000000000000000000512f00000000000000000000000000000000de5c000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5d184bea0e62d14ecced56961e119539fed4debd4c483621121cfc5105dfd821acfe3264f03bc0f5d55fcd003c04034f2442ccfcaa7bcb9301532c03b258c536d22fb858c354cb7fe3b645fa0be26a87de9777c8336dfc17b498604c3b6b8c084dff630df5937e8bd6e26bec8ef17773d9debc4fccd3b5e86bca1e06c010c6ca9940468b51bf353cfea7e3db889ab55f9ba7d02c6"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @local}, {0xa, 0x4e24, 0x5bde, @empty, 0x1a0a}, r5, 0x400}}, 0x48) [ 1485.364322][T27311] RSP: 002b:00007fd048398c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1485.372755][T27311] RAX: ffffffffffffffda RBX: 00007fd0483996d4 RCX: 000000000045c6c9 [ 1485.380738][T27311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1485.388719][T27311] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1485.396822][T27311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1485.404809][T27311] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000001 10:11:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:24 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7) 10:11:25 executing program 0 (fault-call:5 fault-nth:2): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1485.679859][T27416] overlayfs: unrecognized mount option "lowerwë3upperdir=./file0" or missing value 10:11:25 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) keyctl$session_to_parent(0x12) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x16, 0x6b, &(0x7f0000000380)="de0a8a59719daf00d621c5145253da5f42c260e311cb5aaf2696d79fca7d071f35f572de8d5820344f1132e8a20f87fc701793cde0ecc39b522efcbdfb09886c90fdffb836f0e8c5685a2ca462b9debb7edd05d97100fe0fcd9eefd08bcd9d2dd17e698fce4ca84785a838"}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1485.724619][T27442] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1485.778365][T27416] overlayfs: unrecognized mount option "lowerwë3upperdir=./file0" or missing value [ 1485.799296][T27442] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1485.872648][T27527] FAULT_INJECTION: forcing a failure. [ 1485.872648][T27527] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.916932][T27527] CPU: 0 PID: 27527 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1485.926861][T27527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.936926][T27527] Call Trace: [ 1485.940238][T27527] dump_stack+0x197/0x210 [ 1485.944584][T27527] should_fail.cold+0x5/0xf [ 1485.949096][T27527] ? setup_fault_attr+0x1f0/0x1f0 [ 1485.954140][T27527] ? ___might_sleep+0x163/0x2c0 [ 1485.959009][T27527] __should_failslab+0xb7/0x100 [ 1485.963873][T27527] should_failslab+0x9/0x14 [ 1485.968390][T27527] kmem_cache_alloc+0x2aa/0x710 [ 1485.973247][T27527] ? __lock_acquire+0x1af3/0x6320 [ 1485.978282][T27527] ? __kasan_check_read+0x11/0x20 [ 1485.983420][T27527] ? mark_lock+0xc2/0x1220 [ 1485.987836][T27527] ? __kasan_check_read+0x11/0x20 [ 1485.992914][T27527] __d_alloc+0x2e/0x8c0 [ 1485.997050][T27527] ? lookup_fast+0x3dc/0xe60 [ 1486.001642][T27527] d_alloc+0x4d/0x280 [ 1486.005618][T27527] ? __lock_acquire+0x1af3/0x6320 [ 1486.010646][T27527] d_alloc_parallel+0xf4/0x1c00 [ 1486.015497][T27527] ? __kasan_check_read+0x11/0x20 [ 1486.020501][T27527] ? mark_lock+0xc2/0x1220 [ 1486.025003][T27527] ? find_held_lock+0x35/0x130 [ 1486.029771][T27527] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1486.034603][T27527] ? find_held_lock+0x35/0x130 [ 1486.039349][T27527] ? unlazy_walk+0x168/0x3b0 [ 1486.043937][T27527] ? lockdep_init_map+0x1be/0x6d0 [ 1486.048944][T27527] ? lockdep_init_map+0x1be/0x6d0 [ 1486.053955][T27527] __lookup_slow+0x1ab/0x4d0 [ 1486.058532][T27527] ? vfs_unlink+0x620/0x620 [ 1486.063038][T27527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.069303][T27527] ? security_inode_permission+0xcb/0x100 [ 1486.075011][T27527] walk_component+0x7ce/0x10b0 [ 1486.079810][T27527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.086074][T27527] ? follow_dotdot_rcu+0x1120/0x1120 [ 1486.091343][T27527] ? walk_component+0x10b0/0x10b0 [ 1486.096399][T27527] path_lookupat.isra.0+0x183/0x460 [ 1486.101603][T27527] filename_lookup+0x1a3/0x3e0 [ 1486.106365][T27527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.112587][T27527] ? nd_jump_link+0x360/0x360 [ 1486.117264][T27527] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1486.123489][T27527] ? __phys_addr_symbol+0x30/0x70 [ 1486.128495][T27527] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1486.134210][T27527] ? __check_object_size+0x3d/0x437 [ 1486.139398][T27527] ? strncpy_from_user+0x2d1/0x410 [ 1486.144544][T27527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1486.150774][T27527] ? getname_flags+0x277/0x5b0 [ 1486.155522][T27527] user_path_at_empty+0x43/0x50 [ 1486.160361][T27527] do_fchmodat+0x9c/0x150 [ 1486.164698][T27527] ? __ia32_sys_fchmod+0x80/0x80 [ 1486.169637][T27527] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1486.175110][T27527] ? do_syscall_64+0x26/0x790 [ 1486.179819][T27527] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1486.185906][T27527] ? do_syscall_64+0x26/0x790 [ 1486.190572][T27527] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1486.195844][T27527] __x64_sys_chmod+0x5c/0x80 [ 1486.200418][T27527] do_syscall_64+0xfa/0x790 [ 1486.204923][T27527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1486.210794][T27527] RIP: 0033:0x45c6c9 [ 1486.214672][T27527] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1486.234275][T27527] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1486.242704][T27527] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1486.250719][T27527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1486.258685][T27527] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1486.266639][T27527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1486.274598][T27527] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000002 10:11:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x38]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:26 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000440)={0x2, @win={{0x401, 0x738, 0x8, 0x1}, 0x2, 0xffffffc0, &(0x7f0000000240)={{0x3, 0x40, 0x20, 0xffffffff}, &(0x7f0000000140)={{0xffffffff, 0x9, 0x4, 0x81}}}, 0x8, &(0x7f0000000340)="4fbf5f01248edb52393f758eed4900058fb61414c67cf779c9f622689f3efe8b6b32c958206378902ce5ed0c01c69adc7b0ef66dbe247fe4448fe27032367644cb1117c6511529f153f0aefb440782e25ea0b96cd03c05ef8eb14c76fe07807f59e4de44d22a002b2572aa5bdebddf72965245167de7", 0xfa}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) modify_ldt$read(0x0, &(0x7f0000000080)=""/86, 0x56) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:26 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8) 10:11:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:26 executing program 0 (fault-call:5 fault-nth:3): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:26 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x3, 0xaa, [], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000540)=""/170}, &(0x7f00000001c0)=0x78) r5 = socket$inet(0x2, 0x1, 0x80) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r7 = gettid() sched_getparam(r7, &(0x7f0000000100)) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r9) r10 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, 0x0) fstat(r10, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = gettid() sched_getparam(r12, &(0x7f0000000100)) r13 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r14) r15 = syz_open_dev$vcsu(&(0x7f0000000bc0)='/dev/vcsu#\x00', 0x7, 0x2a02) r16 = gettid() sched_getparam(r16, &(0x7f0000000100)) statx(r6, &(0x7f0000000c00)='./bus\x00', 0x6000, 0x200, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r18, 0xc0c0583b, 0x0) r19 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r19}) r20 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r20}) statx(r20, &(0x7f0000001900)='./file0\x00', 0x100, 0x800, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r22, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r23 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r23, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r24 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r24, 0xc0c0583b, 0x0) r25 = gettid() sched_getparam(r25, &(0x7f0000000100)) clone3(&(0x7f0000001100)={0xf8a62c383c681c24, &(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)=0x0, {0x31}, &(0x7f0000000f40)=""/254, 0xfe, &(0x7f0000001040)=""/82, &(0x7f00000010c0)=[0xffffffffffffffff, r25, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x50) r27 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r28) r29 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r29, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r30 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r30, 0xc0c0583b, 0x0) r31 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r31, 0xc0c0583b, 0x0) r32 = gettid() sched_getparam(r32, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CLIENT(r31, 0xc0286405, &(0x7f0000001740)={0x3, 0x6, {r32}, {}, 0x97, 0xfff}) r34 = getuid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r35, 0x0) r36 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r36}) r37 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001780)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) r38 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r38, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r38, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r39 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r39, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r39, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmmsg$unix(r0, &(0x7f0000001840)=[{&(0x7f0000000480)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000600)="9361d974f06a12fa035d39646f1b5bfcbcdc26b37666e3e3eb31efd71e94f0f5b3565df2c0a6fdb98513a712170b37fd816bcaab1862b95fcf5c7b7df97da2d20f5bb2ca04cb48b645309cd077083873e952a75d85d456ec2eb3fe4467d259270fd3750442f7da0d2478498cb7f43e5347ec7801a69425307771463049b81ee22747d44382b2c8e0506e5ed8c7e593dd3247c27c58f7460892aa72289e212a721197bff9b8351283dcf00406023e710a311afdf6f7c5b539b3b0dd46f453eec5dcaf1a69780e9c4d6dc74d23541f930f657c81c66294a95be0", 0xd9}, {&(0x7f0000000500)="535c2cd1764d32dabbb5e18b7fc38ef93c2f48c4360b5c9eb9656606ced941a0d1", 0x21}, {&(0x7f0000000700)="d18f6535bc4a90dead5d0d4a1431285218f152dd34e04dd455a08120e823db1a242ab285f67df0f3e5958c4f102fe62b23c41a637c58472bbc5c20d95809433b7acd70b9996e2d70ca877a9fa5af5c76ece37cc0da47f59bf0776a866a5035db4740034868a66c781b416161bb42b562796d9efa47d9ab0222f325d990", 0x7d}, {&(0x7f0000000780)="c2692390c500303ed181c646ded7404b7e28d9ca3cecb6666c5599b7df2f6cc329fc5218e09f28fb329afdb79e010a106090d03232585770f358fb10bf9b3f62264a9edaf07aa583ec1959c7a04e64e0efd800c69a8e298582c623fc321ac2cb8e5fc81859647c1ba7313a4f83815b7bd8de23ca5ee9553a8f6bc51ca14f48c44b3e9c53aa773d15b6ed0234127dfc33cfdd0b79545ac98e0d4f0db3a7414452d1ded59660d8a03a3000bdacef21cf4d7964051483922afa7b0e7e87b1", 0xbd}, {&(0x7f0000000840)="ae1a34bbaa6ba075901c0764e06cb278992d73fd2066c4e95d86ad1551bc88efd7c5576c2aed41f9f829dcdaa2c54df1b76df37aae4c8957a90a187ff6ab3768b8d65f5fa044933116ca063ce5c89376288d143cf37e5f009a4dffc0c380aa4fa730f2dd9684a2fc97092510bf17a35516d05ad8ed378b56ae30de", 0x7b}, {&(0x7f00000008c0)="2819e4d695122a0d667ce83ce4b204fdef864e9e4c456f15aa1cf4324aa37fbf308c27c41b8379626e7af3e09feae2c5f7f41351db2110a06d0ec61a59d971adf46c1398d8dcff716c322b9371c75a13597adf483594195fb0f0c69433f7870042d8e2e9478387f0a736555b7262d23b50a9cf52a4372a0a34809f352110091cf3469bac3ec1ca651da9be0a08bbb6fa48ab870bb9ee2011726f4ed1bcd9b59fe98407ff623047b14572466ad1c1467a0fa0e12aa28b4d78c196997a4ac5fe7de0711c69f3e9f79f3f6fec365a29afdcd75b2cd239dbb8e86f508e36a35f4629040d439946aeaa20ef2a8815eca46f1ff7973323f1cc258c", 0xf8}], 0x6, 0x0, 0x0, 0x20084044}, {&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="7547f9bab2ef722f11459f547c9ebb78297bc00bafb4", 0x16}], 0x1, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r15, r5, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r21}}}, @rights={{0x28, 0x1, 0x1, [r22, r4, r23, r5, r6, r24]}}, @cred={{0x1c, 0x1, 0x2, {r26, r28}}}], 0xd0, 0x4004000}, {&(0x7f0000001280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001300)="5b7f175d5c0171c760a0b7e38775ef93eddb4ea18e817b1c707aafe244a61412defc7a9db98e004a8be8e9502daa3bcc47f19e76a7667fffa2ff90be1750c9877f4fc0917bbbedf22fdef682679790ca43086b4a5873d3c2c668bc5bc93e4642aebcb4e3488cf9366b2aca61524630a507ac5dea386f29c29d39f03a81aa2f7ccc311b1871ec16ff31be16f4eb45be78c81bd0bcbc", 0x95}, {&(0x7f00000013c0)="6adc99c87f73b8d85d45ed7cb945fe334fcae3041cc293496fe8b8d26e7ac83bb97f47697923c36ac2c9588d12a083bec7d3f495c6b52e53a804b4154af0f2e9d9e516e3fa06c441a52bfa7065bc75b296bb81ccc6f631fb35135f89432852c369e21f1a7b8299a71274a981fae10d54fde33431af6848", 0x77}, {&(0x7f0000001440)="e230d616c8ab1e1e006c97e709f96bd582d8c301a66e7fa1037d5804bed14444d70f69e72e3e6a49692c82e6771660ac86766cf79ff3993866dd31f8ecd5c07397b38109f4a42ec5941705f97c0607482799473057da4ca2aec50f2d20f47aa423aff7f86f546b8f6b1f45fca8ed29ee2f9b26f575d543af37ef2acc829b8a16", 0x80}, {&(0x7f00000014c0)="7fa80c16927fee9ad87f376b2298facc83c28a1c820d91b2a941a2d80d8a02624fae52f92492cc8c64d296b9c5fc9d7880cdbe446cc4f2bc52c44b0e461e031499ff187f47e3236e8dc5337fba3e6b4845ba1692577515b1f87dac67a31c7304c24ebba3d3825f06f052053880746239da45f63e9e5a636d1d0258317ec018769c73a491d9be1244de5691ef339e9ce240076f62e94e35632bd82dffc8da4d9f08d5ed6e6bb1874c83c3256a814de239f88a597fa1942e652479b9fb6ba4c2ae42b784419ae0ebb7148e4755", 0xcc}, {&(0x7f00000015c0)="b4f2d05544e6a91c8cf48d6ae156eab61bc24dc754fc84f26b2440fff1f441dc3ef742fa3c54df99ca80c8f0dec764d601a6f518d4d46d4e40f35402eb4aa827eaba72d7eb0c14e7862ba2c33fd76cf16ea04688f2d9ded7cff9ecef5f8cf0d38f5b851a7dc486e513bc09d94216af350da1436bf835a6459deccf907d295f8fef2a9931d7963bcf692d068e4e4f76fa4115bd24f22b1ff5896ad1dbf2541fd6b902f69d8686d89f229a3ac2edf153e2dc0115ff768508d4873087c421890bd2b9fa5b3b77856e85c77232ff95a449e98dd429e05578cd493c276c7d59fa38400914bb6ba8ef38787d7d7ef939ca0a910b8bbb", 0xf3}], 0x5, &(0x7f00000017c0)=[@rights={{0x1c, 0x1, 0x1, [r29, r30, r6]}}, @cred={{0x1c, 0x1, 0x2, {r33, r34, r35}}}, @rights={{0x20, 0x1, 0x1, [r36, r37, r38, r39]}}], 0x60, 0x1}], 0x3, 0x40004) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1486.918986][T27548] FAULT_INJECTION: forcing a failure. [ 1486.918986][T27548] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.935899][T27554] xt_TCPMSS: Only works on TCP SYN packets [ 1486.971858][T27548] CPU: 0 PID: 27548 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1486.981788][T27548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.991853][T27548] Call Trace: [ 1486.995178][T27548] dump_stack+0x197/0x210 [ 1486.996520][T27550] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1486.999535][T27548] should_fail.cold+0x5/0xf [ 1486.999597][T27548] ? setup_fault_attr+0x1f0/0x1f0 [ 1487.019895][T27548] ? ___might_sleep+0x163/0x2c0 [ 1487.023750][T27552] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1487.024779][T27548] __should_failslab+0xb7/0x100 [ 1487.024800][T27548] should_failslab+0x9/0x14 [ 1487.044888][T27548] kmem_cache_alloc+0x2aa/0x710 [ 1487.049752][T27548] ? is_bpf_image_address+0x1b8/0x290 [ 1487.055143][T27548] ? find_held_lock+0x35/0x130 [ 1487.059931][T27548] __d_alloc+0x2e/0x8c0 [ 1487.064107][T27548] d_alloc+0x4d/0x280 [ 1487.068110][T27548] d_alloc_parallel+0xf4/0x1c00 [ 1487.072973][T27548] ? __kasan_check_read+0x11/0x20 [ 1487.078023][T27548] ? __kasan_check_read+0x11/0x20 [ 1487.083058][T27548] ? mark_lock+0xc2/0x1220 [ 1487.087503][T27548] ? __d_lookup_rcu+0x6c0/0x6c0 [ 1487.087510][T27562] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1487.106504][T27548] ? __d_lookup+0x408/0x750 [ 1487.111026][T27548] ? find_held_lock+0x35/0x130 [ 1487.115800][T27548] ? lockdep_init_map+0x1be/0x6d0 [ 1487.120842][T27548] ? lockdep_init_map+0x1be/0x6d0 [ 1487.125893][T27548] __lookup_slow+0x1ab/0x4d0 [ 1487.130501][T27548] ? vfs_unlink+0x620/0x620 [ 1487.135052][T27548] ? d_lookup+0x199/0x260 [ 1487.139410][T27548] lookup_one_len_unlocked+0x123/0x140 [ 1487.144879][T27548] ? lookup_one_len+0x1a0/0x1a0 [ 1487.149782][T27548] ? __kasan_check_read+0x11/0x20 [ 1487.154819][T27548] ? mark_lock+0xc2/0x1220 [ 1487.159254][T27548] lookup_positive_unlocked+0x27/0xc0 [ 1487.164640][T27548] ovl_lookup_single+0x63/0x900 10:11:26 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc) 10:11:26 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = semget$private(0x0, 0x3, 0x690) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x100, 0xfff, 0xffc0, 0x7f]) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0', @ANYRES16, @ANYRES16=r0]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:26 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000280)={r8, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x6a, 0x11, 0x1, 0x0, 0x4000, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) recvfrom$packet(r0, &(0x7f0000000140)=""/17, 0x11, 0x2001, &(0x7f00000001c0)={0x11, 0xf8, r8, 0x1, 0x3f, 0x6, @random="7fa5ed8820be"}, 0x14) [ 1487.169521][T27548] ovl_lookup_layer+0x40d/0x4c0 [ 1487.175176][T27548] ? find_held_lock+0x35/0x130 [ 1487.179952][T27548] ? ovl_lookup_single+0x900/0x900 [ 1487.185084][T27548] ? __kasan_check_write+0x14/0x20 [ 1487.190208][T27548] ? override_creds+0x135/0x170 [ 1487.195088][T27548] ovl_lookup+0x43d/0x1a20 [ 1487.199551][T27548] ? ovl_path_next+0x2e0/0x2e0 [ 1487.204338][T27548] ? mark_lock+0xc2/0x1220 [ 1487.208771][T27548] ? find_held_lock+0x35/0x130 [ 1487.213523][T27548] ? unlazy_walk+0x168/0x3b0 [ 1487.218103][T27548] ? lockdep_init_map+0x1be/0x6d0 [ 1487.223255][T27548] ? lockdep_init_map+0x1be/0x6d0 [ 1487.228314][T27548] __lookup_slow+0x279/0x4d0 [ 1487.232908][T27548] ? vfs_unlink+0x620/0x620 [ 1487.237422][T27548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.243647][T27548] ? security_inode_permission+0xcb/0x100 [ 1487.249366][T27548] walk_component+0x7ce/0x10b0 [ 1487.254130][T27548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.260377][T27548] ? follow_dotdot_rcu+0x1120/0x1120 [ 1487.265652][T27548] ? walk_component+0x10b0/0x10b0 [ 1487.270671][T27548] path_lookupat.isra.0+0x183/0x460 [ 1487.275856][T27548] filename_lookup+0x1a3/0x3e0 [ 1487.280606][T27548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.286833][T27548] ? nd_jump_link+0x360/0x360 [ 1487.291515][T27548] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1487.297905][T27548] ? __phys_addr_symbol+0x30/0x70 [ 1487.302917][T27548] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1487.308624][T27548] ? __check_object_size+0x3d/0x437 [ 1487.313849][T27548] ? strncpy_from_user+0x2d1/0x410 [ 1487.318967][T27548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.325194][T27548] ? getname_flags+0x277/0x5b0 [ 1487.329959][T27548] user_path_at_empty+0x43/0x50 [ 1487.334797][T27548] do_fchmodat+0x9c/0x150 [ 1487.339111][T27548] ? __ia32_sys_fchmod+0x80/0x80 [ 1487.344150][T27548] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1487.349619][T27548] ? do_syscall_64+0x26/0x790 [ 1487.354413][T27548] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1487.360476][T27548] ? do_syscall_64+0x26/0x790 [ 1487.365150][T27548] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1487.370433][T27548] __x64_sys_chmod+0x5c/0x80 [ 1487.375009][T27548] do_syscall_64+0xfa/0x790 [ 1487.379518][T27548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1487.385391][T27548] RIP: 0033:0x45c6c9 [ 1487.389268][T27548] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1487.408852][T27548] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1487.417243][T27548] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1487.425201][T27548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1487.433162][T27548] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1487.441112][T27548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1487.449683][T27548] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000003 10:11:26 executing program 0 (fault-call:5 fault-nth:4): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1487.619300][T27673] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1487.651367][T27676] overlayfs: failed to resolve './file0ÿÿ': -2 [ 1487.689326][T27673] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1487.699579][T27679] overlayfs: failed to resolve './file0ÿÿ': -2 [ 1487.725111][T27680] FAULT_INJECTION: forcing a failure. [ 1487.725111][T27680] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.751753][T27680] CPU: 1 PID: 27680 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1487.761697][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.771757][T27680] Call Trace: [ 1487.775072][T27680] dump_stack+0x197/0x210 [ 1487.779446][T27680] should_fail.cold+0x5/0xf [ 1487.783979][T27680] ? setup_fault_attr+0x1f0/0x1f0 [ 1487.789136][T27680] ? ___might_sleep+0x163/0x2c0 [ 1487.794015][T27680] __should_failslab+0xb7/0x100 [ 1487.798879][T27680] should_failslab+0x9/0x14 [ 1487.803390][T27680] __kmalloc+0x2e0/0x770 [ 1487.807647][T27680] ? ovl_lookup_single+0x900/0x900 [ 1487.812768][T27680] ? ovl_alloc_entry+0x25/0x70 [ 1487.817686][T27680] ovl_alloc_entry+0x25/0x70 [ 1487.822296][T27680] ovl_lookup+0x77e/0x1a20 [ 1487.826751][T27680] ? ovl_path_next+0x2e0/0x2e0 [ 1487.831522][T27680] ? mark_lock+0xc2/0x1220 [ 1487.835966][T27680] ? find_held_lock+0x35/0x130 [ 1487.840747][T27680] ? unlazy_walk+0x168/0x3b0 [ 1487.845345][T27680] ? lockdep_init_map+0x1be/0x6d0 [ 1487.850482][T27680] ? lockdep_init_map+0x1be/0x6d0 [ 1487.855528][T27680] __lookup_slow+0x279/0x4d0 [ 1487.860127][T27680] ? vfs_unlink+0x620/0x620 [ 1487.864676][T27680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.870919][T27680] ? security_inode_permission+0xcb/0x100 [ 1487.876654][T27680] walk_component+0x7ce/0x10b0 [ 1487.881422][T27680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.887678][T27680] ? follow_dotdot_rcu+0x1120/0x1120 [ 1487.892987][T27680] ? walk_component+0x10b0/0x10b0 10:11:27 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x12) [ 1487.898043][T27680] path_lookupat.isra.0+0x183/0x460 [ 1487.903261][T27680] filename_lookup+0x1a3/0x3e0 [ 1487.908034][T27680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.914279][T27680] ? nd_jump_link+0x360/0x360 [ 1487.918991][T27680] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1487.925262][T27680] ? __phys_addr_symbol+0x30/0x70 [ 1487.930270][T27680] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1487.935978][T27680] ? __check_object_size+0x3d/0x437 [ 1487.941282][T27680] ? strncpy_from_user+0x2d1/0x410 [ 1487.946430][T27680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1487.952662][T27680] ? getname_flags+0x277/0x5b0 [ 1487.957435][T27680] user_path_at_empty+0x43/0x50 [ 1487.962295][T27680] do_fchmodat+0x9c/0x150 [ 1487.966634][T27680] ? __ia32_sys_fchmod+0x80/0x80 [ 1487.971569][T27680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1487.977123][T27680] ? do_syscall_64+0x26/0x790 [ 1487.981945][T27680] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1487.988019][T27680] ? do_syscall_64+0x26/0x790 [ 1487.992694][T27680] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1487.997994][T27680] __x64_sys_chmod+0x5c/0x80 [ 1488.002581][T27680] do_syscall_64+0xfa/0x790 [ 1488.007092][T27680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1488.015839][T27680] RIP: 0033:0x45c6c9 [ 1488.019719][T27680] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1488.039314][T27680] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a 10:11:27 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=*/file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1488.047730][T27680] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1488.055696][T27680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1488.063656][T27680] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1488.071680][T27680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1488.079646][T27680] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000004 [ 1488.105477][T27567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1488.201072][T27570] device veth11 entered promiscuous mode [ 1488.201228][T27781] overlayfs: failed to resolve '*/file0': -2 [ 1488.231762][T27781] overlayfs: failed to resolve '*/file0': -2 [ 1488.258148][T27570] device veth11 left promiscuous mode [ 1488.301909][T27786] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1488.325532][T27786] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:27 executing program 0 (fault-call:5 fault-nth:5): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:27 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f03006469723d2e2f66696c65312c75707065726469723d2e2f66696c653085c2ec1564213d2f5343ba0c4282c248846c455fc352854663a274390370a99092a5f14d2548779d29845498e8d4d2ec2824"]) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:27 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x7b9b35d207867fc5, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x20008000) ioctl$KDSKBLED(r3, 0x4b65, 0xfff) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000480)=0x3) 10:11:27 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x48) [ 1488.485290][T27800] overlayfs: unrecognized mount option "wo" or missing value [ 1488.503421][T27796] xt_TCPMSS: Only works on TCP SYN packets [ 1488.505371][T27798] FAULT_INJECTION: forcing a failure. [ 1488.505371][T27798] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.572789][T27800] overlayfs: unrecognized mount option "wo" or missing value [ 1488.591852][T27798] CPU: 0 PID: 27798 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1488.601902][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.611975][T27798] Call Trace: [ 1488.615286][T27798] dump_stack+0x197/0x210 [ 1488.619641][T27798] should_fail.cold+0x5/0xf [ 1488.624167][T27798] ? setup_fault_attr+0x1f0/0x1f0 [ 1488.624497][T27865] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1488.629206][T27798] ? ___might_sleep+0x163/0x2c0 [ 1488.629231][T27798] ? ovl_destroy_inode+0x120/0x120 [ 1488.629249][T27798] __should_failslab+0xb7/0x100 [ 1488.629268][T27798] should_failslab+0x9/0x14 [ 1488.629285][T27798] kmem_cache_alloc+0x2aa/0x710 [ 1488.629307][T27798] ? _raw_spin_unlock+0x28/0x40 10:11:28 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4c) [ 1488.652477][T27865] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1488.654967][T27798] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1488.654988][T27798] ? ilookup5_nowait+0xaa/0xc0 [ 1488.655011][T27798] ? ovl_destroy_inode+0x120/0x120 [ 1488.655023][T27798] ? ovl_get_redirect_xattr.cold+0x1a/0x1a [ 1488.655045][T27798] ovl_alloc_inode+0x1c/0x190 [ 1488.709850][T27798] alloc_inode+0x68/0x1e0 [ 1488.714177][T27798] iget5_locked+0x63/0xe0 [ 1488.718487][T27798] ? ovl_inode_test+0x50/0x50 [ 1488.723149][T27798] ovl_get_inode+0x8da/0xca4 [ 1488.727794][T27798] ovl_lookup+0x8fe/0x1a20 [ 1488.732231][T27798] ? ovl_path_next+0x2e0/0x2e0 [ 1488.737157][T27798] ? mark_lock+0xc2/0x1220 [ 1488.741590][T27798] ? find_held_lock+0x35/0x130 [ 1488.746364][T27798] ? lockdep_init_map+0x1be/0x6d0 [ 1488.751392][T27798] __lookup_slow+0x279/0x4d0 [ 1488.756013][T27798] ? vfs_unlink+0x620/0x620 [ 1488.762609][T27798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1488.768843][T27798] ? security_inode_permission+0xcb/0x100 [ 1488.774565][T27798] walk_component+0x7ce/0x10b0 [ 1488.779322][T27798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1488.785557][T27798] ? follow_dotdot_rcu+0x1120/0x1120 [ 1488.790841][T27798] ? walk_component+0x10b0/0x10b0 [ 1488.795861][T27798] path_lookupat.isra.0+0x183/0x460 [ 1488.801050][T27798] filename_lookup+0x1a3/0x3e0 [ 1488.805798][T27798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1488.812032][T27798] ? nd_jump_link+0x360/0x360 [ 1488.816708][T27798] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1488.822933][T27798] ? __phys_addr_symbol+0x30/0x70 [ 1488.827939][T27798] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1488.833699][T27798] ? __check_object_size+0x3d/0x437 [ 1488.838913][T27798] ? strncpy_from_user+0x2d1/0x410 [ 1488.844026][T27798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1488.850245][T27798] ? getname_flags+0x277/0x5b0 [ 1488.854994][T27798] user_path_at_empty+0x43/0x50 [ 1488.859872][T27798] do_fchmodat+0x9c/0x150 [ 1488.864197][T27798] ? __ia32_sys_fchmod+0x80/0x80 [ 1488.869119][T27798] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1488.874580][T27798] ? do_syscall_64+0x26/0x790 [ 1488.879308][T27798] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1488.885406][T27798] ? do_syscall_64+0x26/0x790 [ 1488.890115][T27798] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1488.895395][T27798] __x64_sys_chmod+0x5c/0x80 [ 1488.899988][T27798] do_syscall_64+0xfa/0x790 [ 1488.904508][T27798] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1488.910500][T27798] RIP: 0033:0x45c6c9 [ 1488.914381][T27798] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1488.933965][T27798] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1488.942400][T27798] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1488.950355][T27798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1488.958309][T27798] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1488.966274][T27798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1488.974250][T27798] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000005 [ 1488.989340][T27798] overlayfs: failed to get inode (-12) 10:11:28 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x60040, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 10:11:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:28 executing program 0 (fault-call:5 fault-nth:6): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:28 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1489.175888][T27992] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1489.273086][T28023] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1489.336208][T27992] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1489.339895][T28077] FAULT_INJECTION: forcing a failure. [ 1489.339895][T28077] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1489.363812][T28077] CPU: 1 PID: 28077 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1489.369398][T28023] Unknown ioctl 4726 [ 1489.373710][T28077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.373718][T28077] Call Trace: [ 1489.373746][T28077] dump_stack+0x197/0x210 [ 1489.373775][T28077] should_fail.cold+0x5/0xf [ 1489.373803][T28077] ? setup_fault_attr+0x1f0/0x1f0 [ 1489.404878][T28077] ? rcu_read_unlock+0x16/0x60 [ 1489.409664][T28077] ? find_held_lock+0x35/0x130 [ 1489.414464][T28077] should_fail_alloc_page+0x50/0x60 [ 1489.419681][T28077] __alloc_pages_nodemask+0x1a1/0x910 [ 1489.425072][T28077] ? lock_downgrade+0x920/0x920 [ 1489.429944][T28077] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1489.435190][T28133] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1489.435684][T28077] ? rcu_read_unlock+0x2e/0x60 [ 1489.454661][T28077] cache_grow_begin+0x90/0xc60 [ 1489.459453][T28077] ? trace_hardirqs_off+0x62/0x240 [ 1489.464701][T28077] kmem_cache_alloc+0x64e/0x710 [ 1489.470101][T28077] ? _raw_spin_unlock+0x28/0x40 [ 1489.474988][T28077] ? ovl_destroy_inode+0x120/0x120 [ 1489.480118][T28077] ? ovl_get_redirect_xattr.cold+0x1a/0x1a [ 1489.485944][T28077] ovl_alloc_inode+0x1c/0x190 [ 1489.490642][T28077] alloc_inode+0x68/0x1e0 [ 1489.494992][T28077] iget5_locked+0x63/0xe0 [ 1489.499333][T28077] ? ovl_inode_test+0x50/0x50 [ 1489.504053][T28077] ovl_get_inode+0x8da/0xca4 [ 1489.508674][T28077] ovl_lookup+0x8fe/0x1a20 [ 1489.513241][T28077] ? ovl_path_next+0x2e0/0x2e0 [ 1489.518021][T28077] ? mark_lock+0xc2/0x1220 [ 1489.522469][T28077] ? find_held_lock+0x35/0x130 [ 1489.527266][T28077] ? lockdep_init_map+0x1be/0x6d0 [ 1489.532319][T28077] __lookup_slow+0x279/0x4d0 [ 1489.536935][T28077] ? vfs_unlink+0x620/0x620 [ 1489.541495][T28077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1489.547775][T28077] ? security_inode_permission+0xcb/0x100 [ 1489.553521][T28077] walk_component+0x7ce/0x10b0 [ 1489.558310][T28077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1489.564567][T28077] ? follow_dotdot_rcu+0x1120/0x1120 [ 1489.569978][T28077] ? walk_component+0x10b0/0x10b0 [ 1489.575042][T28077] path_lookupat.isra.0+0x183/0x460 [ 1489.580268][T28077] filename_lookup+0x1a3/0x3e0 10:11:29 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec00000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) listen(r5, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000140)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1489.585040][T28077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1489.591295][T28077] ? nd_jump_link+0x360/0x360 [ 1489.596008][T28077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1489.602262][T28077] ? __phys_addr_symbol+0x30/0x70 [ 1489.607299][T28077] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1489.613029][T28077] ? __check_object_size+0x3d/0x437 [ 1489.618392][T28077] ? strncpy_from_user+0x2d1/0x410 [ 1489.623528][T28077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1489.629780][T28077] ? getname_flags+0x277/0x5b0 [ 1489.634565][T28077] user_path_at_empty+0x43/0x50 [ 1489.639435][T28077] do_fchmodat+0x9c/0x150 [ 1489.645561][T28077] ? __ia32_sys_fchmod+0x80/0x80 [ 1489.650511][T28077] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1489.655995][T28077] ? do_syscall_64+0x26/0x790 [ 1489.660845][T28077] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1489.666928][T28077] ? do_syscall_64+0x26/0x790 [ 1489.671626][T28077] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1489.676953][T28077] __x64_sys_chmod+0x5c/0x80 [ 1489.681562][T28077] do_syscall_64+0xfa/0x790 [ 1489.686088][T28077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1489.691987][T28077] RIP: 0033:0x45c6c9 [ 1489.695892][T28077] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1489.715510][T28077] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1489.723937][T28077] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1489.731916][T28077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1489.739894][T28077] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1489.748059][T28077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1489.756150][T28077] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000006 10:11:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x2]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:29 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x68) 10:11:29 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x2, 0x2, 0x4, 0x2040000, 0x1, {}, {0x5, 0xc, 0x7, 0x0, 0x81, 0x0, "fd605f16"}, 0x7fffffff, 0x3, @fd=r1, 0x100, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000140)=0x8, 0x4) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:29 executing program 0 (fault-call:5 fault-nth:7): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:29 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000140)=0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000001c0)={'veth1_to_hsr\x00', {0x2, 0x4e23, @loopback}}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1490.350394][T28255] xt_TCPMSS: Only works on TCP SYN packets [ 1490.372015][T28260] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1490.380251][T28256] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1490.406261][T28259] FAULT_INJECTION: forcing a failure. [ 1490.406261][T28259] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.435674][T28259] CPU: 0 PID: 28259 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1490.445611][T28259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.455782][T28259] Call Trace: [ 1490.459093][T28259] dump_stack+0x197/0x210 [ 1490.463449][T28259] should_fail.cold+0x5/0xf [ 1490.468087][T28259] ? setup_fault_attr+0x1f0/0x1f0 [ 1490.473136][T28259] ? ___might_sleep+0x163/0x2c0 [ 1490.478018][T28259] __should_failslab+0xb7/0x100 [ 1490.482888][T28259] should_failslab+0x9/0x14 [ 1490.487414][T28259] __kmalloc+0x2e0/0x770 [ 1490.491668][T28259] ? mark_held_locks+0xf0/0xf0 [ 1490.496556][T28259] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1490.502299][T28259] tomoyo_realpath_from_path+0xc5/0x660 [ 1490.502480][T28370] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1490.507893][T28259] ? tomoyo_path_number_perm+0x193/0x520 [ 1490.507932][T28259] tomoyo_path_number_perm+0x1dd/0x520 [ 1490.507947][T28259] ? tomoyo_path_number_perm+0x193/0x520 [ 1490.507978][T28259] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1490.508053][T28259] ? lock_acquire+0x190/0x410 [ 1490.549408][T28259] ? chmod_common+0x176/0x460 [ 1490.554122][T28259] ? __kasan_check_write+0x14/0x20 [ 1490.559251][T28259] ? down_write+0xdf/0x150 [ 1490.563730][T28259] tomoyo_path_chmod+0x26/0x30 [ 1490.568519][T28259] security_path_chmod+0x107/0x160 [ 1490.573655][T28259] chmod_common+0x184/0x460 [ 1490.578179][T28259] ? zs_compact+0x670/0x1670 [ 1490.582803][T28259] ? vfs_fallocate+0xa50/0xa50 [ 1490.587588][T28259] ? strncpy_from_user+0x2d1/0x410 [ 1490.592822][T28259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1490.599096][T28259] ? getname_flags+0x277/0x5b0 [ 1490.603896][T28259] do_fchmodat+0xbe/0x150 [ 1490.608246][T28259] ? __ia32_sys_fchmod+0x80/0x80 [ 1490.613221][T28259] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1490.618702][T28259] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1490.624789][T28259] ? do_syscall_64+0x26/0x790 [ 1490.629480][T28259] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1490.634799][T28259] __x64_sys_chmod+0x5c/0x80 [ 1490.639403][T28259] do_syscall_64+0xfa/0x790 [ 1490.644107][T28259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1490.650011][T28259] RIP: 0033:0x45c6c9 [ 1490.653919][T28259] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1490.673997][T28259] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1490.682422][T28259] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1490.690520][T28259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1490.698521][T28259] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 10:11:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:29 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:30 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x4000, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') [ 1490.706677][T28259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1490.714714][T28259] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000007 [ 1490.747431][T28256] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:30 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6c) 10:11:30 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5d2c10a1f9c89e3bdbca067409a12ba704c142dee09cb5c24187cf642319165fba7bb8bd82303a27b7d87c942977a9a0ee219ccac6f0e425e429e94ea9cbb447b2cf58d91cce62e7691805694d68d2a560a5b4c95709a57d03df560d0bca68c1b72089d7f0edaf102c8291f58f77949e57a199c"]) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) accept$alg(r4, 0x0, 0x0) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:30 executing program 0 (fault-call:5 fault-nth:8): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1490.783929][T28259] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1490.983145][T28489] FAULT_INJECTION: forcing a failure. [ 1490.983145][T28489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1490.996388][T28489] CPU: 1 PID: 28489 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1490.999479][T28491] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1491.006288][T28489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.006295][T28489] Call Trace: [ 1491.006324][T28489] dump_stack+0x197/0x210 [ 1491.006356][T28489] should_fail.cold+0x5/0xf [ 1491.033348][T28491] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1491.034965][T28489] ? setup_fault_attr+0x1f0/0x1f0 [ 1491.034985][T28489] ? lock_downgrade+0x920/0x920 [ 1491.035017][T28489] should_fail_alloc_page+0x50/0x60 [ 1491.068683][T28489] __alloc_pages_nodemask+0x1a1/0x910 [ 1491.074087][T28489] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1491.079819][T28489] ? mark_lock+0xc2/0x1220 [ 1491.084279][T28489] cache_grow_begin+0x90/0xc60 [ 1491.089065][T28489] ? trace_hardirqs_off+0x62/0x240 [ 1491.094207][T28489] __kmalloc+0x6b2/0x770 [ 1491.098461][T28489] ? mark_held_locks+0xf0/0xf0 [ 1491.103245][T28489] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1491.103306][T28495] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1491.108984][T28489] tomoyo_realpath_from_path+0xc5/0x660 [ 1491.109003][T28489] ? tomoyo_path_number_perm+0x193/0x520 [ 1491.109034][T28489] tomoyo_path_number_perm+0x1dd/0x520 [ 1491.109048][T28489] ? tomoyo_path_number_perm+0x193/0x520 [ 1491.109071][T28489] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1491.109148][T28489] ? lock_acquire+0x190/0x410 [ 1491.144561][T28495] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1491.148163][T28489] ? chmod_common+0x176/0x460 [ 1491.148197][T28489] ? __kasan_check_write+0x14/0x20 [ 1491.148214][T28489] ? down_write+0xdf/0x150 [ 1491.148239][T28489] tomoyo_path_chmod+0x26/0x30 [ 1491.148256][T28489] security_path_chmod+0x107/0x160 [ 1491.148278][T28489] chmod_common+0x184/0x460 [ 1491.195836][T28489] ? zs_compact+0x670/0x1670 [ 1491.200449][T28489] ? vfs_fallocate+0xa50/0xa50 [ 1491.205236][T28489] ? strncpy_from_user+0x2d1/0x410 [ 1491.210372][T28489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1491.216627][T28489] ? getname_flags+0x277/0x5b0 [ 1491.221418][T28489] do_fchmodat+0xbe/0x150 [ 1491.225772][T28489] ? __ia32_sys_fchmod+0x80/0x80 [ 1491.230724][T28489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1491.236208][T28489] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1491.242286][T28489] ? do_syscall_64+0x26/0x790 [ 1491.246974][T28489] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1491.252296][T28489] __x64_sys_chmod+0x5c/0x80 [ 1491.256906][T28489] do_syscall_64+0xfa/0x790 [ 1491.261438][T28489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1491.267339][T28489] RIP: 0033:0x45c6c9 [ 1491.271250][T28489] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1491.290971][T28489] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1491.299399][T28489] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1491.307386][T28489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1491.315367][T28489] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1491.323355][T28489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1491.331440][T28489] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000008 10:11:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x3]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:31 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'ip6erspan0\x00', {0x7ff}, 0x7}) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000200)='./bus/file0\x00') 10:11:31 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x74) 10:11:31 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) getpeername$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000380)=0x10) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x1, {0x4, 0x1, 0x100}}) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:31 executing program 0 (fault-call:5 fault-nth:9): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1492.110501][T28512] xt_TCPMSS: Only works on TCP SYN packets [ 1492.183866][T28514] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1492.195157][T28511] FAULT_INJECTION: forcing a failure. [ 1492.195157][T28511] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.195498][T28513] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1492.256914][T28511] CPU: 0 PID: 28511 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1492.266860][T28511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.276923][T28511] Call Trace: [ 1492.280347][T28511] dump_stack+0x197/0x210 [ 1492.284706][T28511] should_fail.cold+0x5/0xf [ 1492.289242][T28511] ? setup_fault_attr+0x1f0/0x1f0 [ 1492.294295][T28511] ? ___might_sleep+0x163/0x2c0 [ 1492.299178][T28511] __should_failslab+0xb7/0x100 10:11:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1492.304048][T28511] should_failslab+0x9/0x14 [ 1492.308823][T28511] __kmalloc+0x2e0/0x770 [ 1492.313083][T28511] ? tomoyo_unix_entry.cold+0x16/0x16 [ 1492.318464][T28511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1492.319238][T28624] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1492.324723][T28511] ? d_absolute_path+0x11b/0x170 [ 1492.324748][T28511] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1492.324776][T28511] tomoyo_encode2.part.0+0xf5/0x400 10:11:31 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7a) [ 1492.324801][T28511] tomoyo_encode+0x2b/0x50 [ 1492.358825][T28511] tomoyo_realpath_from_path+0x19c/0x660 [ 1492.364469][T28511] ? tomoyo_path_perm+0x1cb/0x430 [ 1492.369560][T28511] tomoyo_path_perm+0x230/0x430 [ 1492.374429][T28511] ? tomoyo_path_perm+0x1cb/0x430 [ 1492.379474][T28511] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1492.385563][T28511] ? is_bpf_image_address+0x1da/0x290 [ 1492.390963][T28511] ? __kernel_text_address+0xd/0x40 [ 1492.396172][T28511] ? unwind_get_return_address+0x61/0xa0 [ 1492.401846][T28511] ? stack_trace_save+0x8f/0xc0 10:11:31 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x220000, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f00000001c0)=0xc) [ 1492.406709][T28511] ? stack_trace_consume_entry+0x170/0x170 [ 1492.412543][T28511] tomoyo_inode_getattr+0x1d/0x30 [ 1492.417591][T28511] security_inode_getattr+0xf2/0x150 [ 1492.423023][T28511] vfs_getattr+0x25/0x70 [ 1492.427286][T28511] ovl_copy_up_one+0x134/0x1860 [ 1492.432145][T28511] ? find_held_lock+0x35/0x130 [ 1492.436924][T28511] ? debug_check_no_obj_freed+0x20a/0x441 [ 1492.442659][T28511] ? ovl_copy_up_inode+0x600/0x600 [ 1492.447782][T28511] ? __kasan_check_read+0x11/0x20 [ 1492.452866][T28511] ? __kasan_check_read+0x11/0x20 [ 1492.457900][T28511] ? __lock_acquire+0x1af3/0x6320 [ 1492.462945][T28511] ? __kasan_check_read+0x11/0x20 [ 1492.467979][T28511] ? __lock_acquire+0x8a0/0x6320 [ 1492.472930][T28511] ? __kasan_check_read+0x11/0x20 [ 1492.478040][T28511] ? __kasan_check_read+0x11/0x20 [ 1492.483119][T28511] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1492.488867][T28511] ? dget_parent+0x1a8/0x560 [ 1492.493487][T28511] ovl_copy_up_flags+0x15a/0x1e0 [ 1492.498454][T28511] ovl_copy_up+0x18/0x1c [ 1492.502814][T28511] ovl_setattr+0x1ce/0x930 [ 1492.507249][T28511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1492.513505][T28511] ? ovl_fill_inode+0x620/0x620 [ 1492.518379][T28511] ? evm_inode_setattr+0x70/0x170 [ 1492.523432][T28511] ? ovl_fill_inode+0x620/0x620 [ 1492.528304][T28511] notify_change+0xb6d/0x1060 [ 1492.533106][T28511] ? audit_init_watch+0xd0/0x1d0 [ 1492.538072][T28511] chmod_common+0x217/0x460 [ 1492.542592][T28511] ? perf_trace_cma_release+0x340/0x470 [ 1492.548334][T28511] ? vfs_fallocate+0xa50/0xa50 [ 1492.553312][T28511] ? strncpy_from_user+0x2d1/0x410 [ 1492.558504][T28511] do_fchmodat+0xbe/0x150 [ 1492.562860][T28511] ? __ia32_sys_fchmod+0x80/0x80 [ 1492.567813][T28511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1492.573301][T28511] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1492.579385][T28511] ? do_syscall_64+0x26/0x790 [ 1492.584115][T28511] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1492.589427][T28511] __x64_sys_chmod+0x5c/0x80 [ 1492.594124][T28511] do_syscall_64+0xfa/0x790 [ 1492.598709][T28511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1492.604612][T28511] RIP: 0033:0x45c6c9 [ 1492.608529][T28511] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1492.628256][T28511] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1492.636678][T28511] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1492.644675][T28511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1492.652661][T28511] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1492.660667][T28511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1492.670907][T28511] R13: 0000000000000068 R14: 00000000004c2674 R15: 0000000000000009 [ 1492.697821][T28511] ERROR: Out of memory at tomoyo_realpath_from_path. 10:11:32 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x5416, 0x100, 0x7, 0xffff, 0x7, 0x8000}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)={0x4, 0x1, 0x4, 0x20, 0x472, {}, {0x1, 0xb, 0x5, 0x32, 0xe5, 0x8b, "213a8f48"}, 0x800, 0x0, @userptr=0xff, 0x600000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000040)) mq_timedreceive(r1, &(0x7f0000000480)=""/55, 0x37, 0x0, &(0x7f00000004c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r5 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x33, 0x8000) fcntl$notify(r5, 0x402, 0x79) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000640)=ANY=[@ANYBLOB="020d0000100000000000f4ffffffff14030006004700000002000000e0000001000000f5000000000800120002000200000000000000000030006ce001010000ff3f567b000000200200000000152c000000005d00000001020014bb00000000000000000000000003000500000000100200ed00e0000001000000ba000000008756cfe7f86b9bcb27e99152f06adacc9022926a88ea7d6924995f88847b10924000000000000000046969ee5e3b8fd66bce242db3c8b2799f24b48ecd22d38e7aaaa3f287ff13a9459a701d6f2f384970ebe0cacaa1e0746825865098010058ea1e9c845669fc1e1bf5cc82d91a5a71381f5103000000fcee84e08a1f00aaec90085fc0991411c8af53beb899323d7e9ea6be4117995d7161ed77947e98aa1c91a22965a14f43b07e140f3b0cab86c63250ed8dd848be920814a09d0853a543cfe555c582ea0e584ad332c85d4edd0084773865d79c13c8c5a72874b82bcaa7ff075e8c9747cdf0eac8ae4779acbd0167de4c0b5d964aeb2cda78cb28cdfa8129faa572031b2fd03546a2a4fb8f5c8f766a32b1b8900b460000000008000000caebcde6b79557c0f437543dbc192ff7842416342bf9d6469745a4e05fa04cad982994df7f627d20004b253bd0c4c0fac0938d4c2a0239e83942ed2580f64fdfe334751f0cbc9c3d0372140312dc87fb3fb3c0cd0a788f5c02f6f19a07d582b276c5fae42ed18a65f8174b35a56ab5cc136f62d3b48e7c7fc34fc7241e78c079739f333da3211deac86de04967fe4bbb5797000be260594f08a2747222d35d2d097998377cebe7f9f2714f8f62f84f671e4c975938f2fdaf300877c11deeb8c21325cfb6707dce41802700ab0f9b41f3b7f1bf76b0e82acec52c5f4b43a6ea7723916f562e5d85e774f68f904a23854e1a927d554251a70ccfd487e7ed712db2a609db294c661ba05553974113000000005c81604365518729665f8a960f8ca336575e40b752470eccba74113af0c22923812310d36b3ce3eb9ad3ff1935f38fb9a93e26622e8ae0aeaeec31132c351751d4d1dc719f9bfe1c025ebb8dcb9c487942a796f182b7935cfcecae7f1c5aaf75c1fdb74ff8fa6bf3a0499f917e3d94936a403f665de859edba015dd478a3b38c90c7e9ab45b6dd1f3c83446a3f001623c32e54d8c8fc6a10baa5b05ea04f25f90c9746a5e7215810b43bb4b486cffa166ac0804f82c28af51ecd777ef982efc5125c12eec3b5a554b920daf0606821db196f1003e303d7681bc24956cfebfe1ccac7a8c55770b9a6906d000000000000000000f6db03dda4e6779c0000000000000000000000009bd3eeed854e83977baf53e408c959f78e3084b8d785e1a89eb2f3d3660e3d073f390eef14b0f50fec3765c5decaa016f316ee92c36344ac04b3080b3921abf13ebb75a74408b008fe1bfc20023a12809470e3329c3ecc4c65a13d31a7b5875b1a20563fea381e21f7d8b02802fa62c8a85a87f3b76ab18f"], 0x80}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x400024c, 0x0) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) r10 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r10}) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r11}) 10:11:32 executing program 0 (fault-call:5 fault-nth:10): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) 10:11:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1493.041287][T28747] FAULT_INJECTION: forcing a failure. [ 1493.041287][T28747] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.065131][T28747] CPU: 1 PID: 28747 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1493.070302][T28758] xt_TCPMSS: Only works on TCP SYN packets [ 1493.075147][T28747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.075154][T28747] Call Trace: [ 1493.075181][T28747] dump_stack+0x197/0x210 [ 1493.075208][T28747] should_fail.cold+0x5/0xf [ 1493.103274][T28747] ? setup_fault_attr+0x1f0/0x1f0 [ 1493.108320][T28747] ? ___might_sleep+0x163/0x2c0 [ 1493.113329][T28747] __should_failslab+0xb7/0x100 [ 1493.118195][T28747] should_failslab+0x9/0x14 [ 1493.122713][T28747] __kmalloc+0x2e0/0x770 [ 1493.126962][T28747] ? mark_held_locks+0xf0/0xf0 [ 1493.131791][T28747] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1493.137575][T28747] tomoyo_realpath_from_path+0xc5/0x660 [ 1493.138551][T28760] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1493.143153][T28747] ? tomoyo_path_perm+0x1cb/0x430 [ 1493.143187][T28747] tomoyo_path_perm+0x230/0x430 [ 1493.143201][T28747] ? tomoyo_path_perm+0x1cb/0x430 [ 1493.143225][T28747] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1493.175213][T28747] ? is_bpf_image_address+0x1da/0x290 [ 1493.180667][T28747] ? common_perm+0x9a0/0x9a0 [ 1493.185271][T28747] ? stack_trace_consume_entry+0x170/0x170 [ 1493.191098][T28747] ? generic_fillattr+0x18/0x5d0 [ 1493.196072][T28747] tomoyo_inode_getattr+0x1d/0x30 [ 1493.201110][T28747] security_inode_getattr+0xf2/0x150 [ 1493.206417][T28747] vfs_getattr+0x25/0x70 [ 1493.210681][T28747] ovl_copy_up_one+0x28e/0x1860 [ 1493.215545][T28747] ? find_held_lock+0x35/0x130 [ 1493.220323][T28747] ? debug_check_no_obj_freed+0x20a/0x441 [ 1493.226067][T28747] ? ovl_copy_up_inode+0x600/0x600 [ 1493.232681][T28747] ? __kasan_check_read+0x11/0x20 [ 1493.237734][T28747] ? __kasan_check_read+0x11/0x20 [ 1493.242763][T28747] ? __lock_acquire+0x1af3/0x6320 [ 1493.247803][T28747] ? __kasan_check_read+0x11/0x20 [ 1493.252841][T28747] ? __lock_acquire+0x8a0/0x6320 [ 1493.257792][T28747] ? __kasan_check_read+0x11/0x20 [ 1493.263004][T28747] ? __kasan_check_read+0x11/0x20 [ 1493.268087][T28747] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1493.273825][T28747] ? dget_parent+0x1a8/0x560 [ 1493.278440][T28747] ovl_copy_up_flags+0x15a/0x1e0 [ 1493.283410][T28747] ovl_copy_up+0x18/0x1c [ 1493.287753][T28747] ovl_setattr+0x1ce/0x930 [ 1493.292189][T28747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1493.298443][T28747] ? ovl_fill_inode+0x620/0x620 [ 1493.303295][T28747] ? evm_inode_setattr+0x70/0x170 [ 1493.308321][T28747] ? ovl_fill_inode+0x620/0x620 [ 1493.313166][T28747] notify_change+0xb6d/0x1060 [ 1493.317871][T28747] ? audit_init_watch+0xd0/0x1d0 [ 1493.322804][T28747] chmod_common+0x217/0x460 [ 1493.327299][T28747] ? perf_trace_cma_release+0x340/0x470 [ 1493.332827][T28747] ? vfs_fallocate+0xa50/0xa50 [ 1493.337584][T28747] ? strncpy_from_user+0x2d1/0x410 [ 1493.342707][T28747] do_fchmodat+0xbe/0x150 [ 1493.347034][T28747] ? __ia32_sys_fchmod+0x80/0x80 [ 1493.351970][T28747] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1493.357434][T28747] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1493.363493][T28747] ? do_syscall_64+0x26/0x790 [ 1493.368159][T28747] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1493.373866][T28747] __x64_sys_chmod+0x5c/0x80 [ 1493.378468][T28747] do_syscall_64+0xfa/0x790 [ 1493.382983][T28747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1493.388874][T28747] RIP: 0033:0x45c6c9 [ 1493.392757][T28747] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1493.412346][T28747] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1493.420749][T28747] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1493.428762][T28747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1493.436729][T28747] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1493.444690][T28747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1493.452644][T28747] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000a [ 1493.463303][T28747] ERROR: Out of memory at tomoyo_realpath_from_path. 10:11:33 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f00000001c0)=0xc) 10:11:33 executing program 5 (fault-call:4 fault-nth:0): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x4]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:33 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xf0) 10:11:33 executing program 0 (fault-call:5 fault-nth:11): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1493.895830][T28867] xt_TCPMSS: Only works on TCP SYN packets [ 1493.927726][T28872] FAULT_INJECTION: forcing a failure. [ 1493.927726][T28872] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.991406][T28872] CPU: 1 PID: 28872 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1494.001345][T28872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.011411][T28872] Call Trace: [ 1494.014732][T28872] dump_stack+0x197/0x210 [ 1494.019097][T28872] should_fail.cold+0x5/0xf [ 1494.022372][T28885] FAULT_INJECTION: forcing a failure. [ 1494.022372][T28885] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.023627][T28872] ? setup_fault_attr+0x1f0/0x1f0 [ 1494.023656][T28872] ? ___might_sleep+0x163/0x2c0 [ 1494.023683][T28872] __should_failslab+0xb7/0x100 [ 1494.023708][T28872] should_failslab+0x9/0x14 [ 1494.055479][T28872] __kmalloc_track_caller+0x2dc/0x760 [ 1494.060912][T28872] ? fput+0x1b/0x20 [ 1494.064733][T28872] ? ksys_write+0x1cf/0x290 [ 1494.069246][T28872] ? strndup_user+0x77/0xd0 [ 1494.073766][T28872] memdup_user+0x26/0xd0 [ 1494.078027][T28872] strndup_user+0x77/0xd0 [ 1494.082382][T28872] __x64_sys_mount+0xe9/0x230 [ 1494.087194][T28872] do_syscall_64+0xfa/0x790 [ 1494.091719][T28872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1494.097609][T28872] RIP: 0033:0x45c6c9 [ 1494.101516][T28872] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1494.121127][T28872] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1494.129549][T28872] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1494.137663][T28872] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1494.150598][T28872] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1494.158576][T28872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1494.166674][T28872] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000000 [ 1494.192417][T28885] CPU: 0 PID: 28885 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1494.199554][T28887] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1494.202332][T28885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.202339][T28885] Call Trace: [ 1494.202364][T28885] dump_stack+0x197/0x210 [ 1494.202394][T28885] should_fail.cold+0x5/0xf [ 1494.235434][T28885] ? setup_fault_attr+0x1f0/0x1f0 10:11:33 executing program 5 (fault-call:4 fault-nth:1): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1494.240480][T28885] ? ___might_sleep+0x163/0x2c0 [ 1494.245358][T28885] __should_failslab+0xb7/0x100 [ 1494.250838][T28885] should_failslab+0x9/0x14 [ 1494.255384][T28885] __kmalloc+0x2e0/0x770 [ 1494.259646][T28885] ? mark_held_locks+0xf0/0xf0 [ 1494.264441][T28885] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1494.270190][T28885] tomoyo_realpath_from_path+0xc5/0x660 [ 1494.275750][T28885] ? tomoyo_path_perm+0x1cb/0x430 [ 1494.280803][T28885] tomoyo_path_perm+0x230/0x430 [ 1494.285659][T28885] ? tomoyo_path_perm+0x1cb/0x430 10:11:33 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) ioprio_set$pid(0x1, r1, 0x1000) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r3, r4+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebfde229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x62, 0x8, '9P2000.u'}, 0x15) accept$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1494.290792][T28885] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1494.296879][T28885] ? is_bpf_image_address+0x1da/0x290 [ 1494.302300][T28885] ? __kernel_text_address+0xd/0x40 [ 1494.307521][T28885] ? unwind_get_return_address+0x61/0xa0 [ 1494.313197][T28885] ? stack_trace_save+0x8f/0xc0 [ 1494.318058][T28885] ? stack_trace_consume_entry+0x170/0x170 [ 1494.323880][T28885] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1494.329924][T28885] tomoyo_inode_getattr+0x1d/0x30 [ 1494.334960][T28885] security_inode_getattr+0xf2/0x150 [ 1494.340309][T28885] vfs_getattr+0x25/0x70 [ 1494.344723][T28885] ovl_copy_up_one+0x134/0x1860 [ 1494.349575][T28885] ? find_held_lock+0x35/0x130 [ 1494.354332][T28885] ? debug_check_no_obj_freed+0x20a/0x441 [ 1494.360047][T28885] ? ovl_copy_up_inode+0x600/0x600 [ 1494.365213][T28885] ? __kasan_check_read+0x11/0x20 [ 1494.370241][T28885] ? __kasan_check_read+0x11/0x20 [ 1494.375642][T28885] ? __lock_acquire+0x1af3/0x6320 [ 1494.380668][T28885] ? __kasan_check_read+0x11/0x20 [ 1494.385686][T28885] ? __lock_acquire+0x8a0/0x6320 [ 1494.390620][T28885] ? __kasan_check_read+0x11/0x20 [ 1494.395692][T28885] ? __kasan_check_read+0x11/0x20 [ 1494.400762][T28885] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1494.406482][T28885] ? dget_parent+0x1a8/0x560 [ 1494.411075][T28885] ovl_copy_up_flags+0x15a/0x1e0 [ 1494.416031][T28885] ovl_copy_up+0x18/0x1c [ 1494.420265][T28885] ovl_setattr+0x1ce/0x930 [ 1494.424673][T28885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1494.430905][T28885] ? ovl_fill_inode+0x620/0x620 [ 1494.435750][T28885] ? evm_inode_setattr+0x70/0x170 [ 1494.440766][T28885] ? ovl_fill_inode+0x620/0x620 [ 1494.445655][T28885] notify_change+0xb6d/0x1060 [ 1494.450448][T28885] ? audit_init_watch+0xd0/0x1d0 [ 1494.455381][T28885] chmod_common+0x217/0x460 [ 1494.459884][T28885] ? perf_trace_cma_release+0x340/0x470 [ 1494.465424][T28885] ? vfs_fallocate+0xa50/0xa50 [ 1494.470181][T28885] ? strncpy_from_user+0x2d1/0x410 [ 1494.475341][T28885] do_fchmodat+0xbe/0x150 [ 1494.479673][T28885] ? __ia32_sys_fchmod+0x80/0x80 [ 1494.484600][T28885] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1494.490054][T28885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1494.496112][T28885] ? do_syscall_64+0x26/0x790 [ 1494.500778][T28885] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1494.506061][T28885] __x64_sys_chmod+0x5c/0x80 [ 1494.510647][T28885] do_syscall_64+0xfa/0x790 [ 1494.515203][T28885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1494.521085][T28885] RIP: 0033:0x45c6c9 [ 1494.524967][T28885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:11:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:34 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x300) [ 1494.544571][T28885] RSP: 002b:00007fd0483b9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1494.552976][T28885] RAX: ffffffffffffffda RBX: 00007fd0483ba6d4 RCX: 000000000045c6c9 [ 1494.560944][T28885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1494.568954][T28885] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1494.577022][T28885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1494.585032][T28885] R13: 0000000000000068 R14: 00000000004c2674 R15: 000000000000000b [ 1494.766657][T28885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1494.825548][T29198] FAULT_INJECTION: forcing a failure. [ 1494.825548][T29198] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.847209][T29198] CPU: 1 PID: 29198 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1494.857140][T29198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.867289][T29198] Call Trace: [ 1494.870600][T29198] dump_stack+0x197/0x210 [ 1494.874965][T29198] should_fail.cold+0x5/0xf [ 1494.879485][T29198] ? __might_fault+0x12b/0x1e0 [ 1494.884275][T29198] ? setup_fault_attr+0x1f0/0x1f0 [ 1494.889333][T29198] ? ___might_sleep+0x163/0x2c0 [ 1494.894219][T29198] __should_failslab+0xb7/0x100 [ 1494.899093][T29198] should_failslab+0x9/0x14 [ 1494.902525][T29202] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1494.903609][T29198] __kmalloc_track_caller+0x2dc/0x760 [ 1494.903638][T29198] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1494.926014][T29198] ? strndup_user+0x77/0xd0 [ 1494.930542][T29198] memdup_user+0x26/0xd0 [ 1494.934799][T29198] strndup_user+0x77/0xd0 [ 1494.939249][T29198] __x64_sys_mount+0x132/0x230 [ 1494.944040][T29198] do_syscall_64+0xfa/0x790 [ 1494.948567][T29198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1494.954465][T29198] RIP: 0033:0x45c6c9 10:11:34 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x80400, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1494.958370][T29198] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1494.977976][T29198] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1494.988570][T29198] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1494.996555][T29198] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1495.004536][T29198] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1495.012518][T29198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:11:34 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x0) [ 1495.014686][T29202] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1495.020513][T29198] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000001 10:11:34 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x408) 10:11:34 executing program 5 (fault-call:4 fault-nth:2): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1495.327875][T29218] FAULT_INJECTION: forcing a failure. [ 1495.327875][T29218] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.361190][T29221] xt_TCPMSS: Only works on TCP SYN packets [ 1495.366201][T29216] overlayfs: failed to resolve './file1': -2 [ 1495.373486][T29218] CPU: 1 PID: 29218 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1495.383480][T29218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.393640][T29218] Call Trace: [ 1495.396949][T29218] dump_stack+0x197/0x210 [ 1495.401304][T29218] should_fail.cold+0x5/0xf [ 1495.404367][T29224] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1495.405821][T29218] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1495.405847][T29218] ? setup_fault_attr+0x1f0/0x1f0 [ 1495.405871][T29218] ? ___might_sleep+0x163/0x2c0 [ 1495.432998][T29218] __should_failslab+0xb7/0x100 [ 1495.437882][T29218] should_failslab+0x9/0x14 [ 1495.442402][T29218] kmem_cache_alloc_trace+0x2d3/0x790 [ 1495.447904][T29218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1495.454160][T29218] ? _copy_from_user+0x12c/0x1a0 [ 1495.456220][T29224] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1495.459124][T29218] copy_mount_options+0x58/0x170 [ 1495.459147][T29218] __x64_sys_mount+0x15e/0x230 [ 1495.459171][T29218] do_syscall_64+0xfa/0x790 [ 1495.459197][T29218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1495.459208][T29218] RIP: 0033:0x45c6c9 [ 1495.459230][T29218] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1495.517098][T29218] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1495.525618][T29218] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1495.533602][T29218] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1495.541586][T29218] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1495.549577][T29218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1495.557664][T29218] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000002 10:11:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x5]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:35 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000200)) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000208000000fedbdf25010000000000000009410000004c00180000000673797a310000000000000000000000000000000000400000000000000000000000000007000000000000b0870c75909550fe5778e7a60997f17e000000000000000445b6bebc822f62e66d95b715f7b14fd1c73404e74d41ae29b925542ca1c4093071db3e8ec268771165dbecd5bf0000"], 0x68}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) bind$l2tp(r3, &(0x7f0000000500)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:35 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x500) 10:11:35 executing program 5 (fault-call:4 fault-nth:3): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:35 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x2) [ 1496.011460][T29332] FAULT_INJECTION: forcing a failure. [ 1496.011460][T29332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1496.024808][T29332] CPU: 1 PID: 29332 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1496.034788][T29332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.044860][T29332] Call Trace: [ 1496.048179][T29332] dump_stack+0x197/0x210 [ 1496.052641][T29332] should_fail.cold+0x5/0xf [ 1496.057170][T29332] ? setup_fault_attr+0x1f0/0x1f0 [ 1496.062210][T29332] ? __kasan_check_read+0x11/0x20 [ 1496.065054][T29337] xt_TCPMSS: Only works on TCP SYN packets [ 1496.067270][T29332] ? __lock_acquire+0x1af3/0x6320 [ 1496.067290][T29332] ? __kasan_check_read+0x11/0x20 [ 1496.067305][T29332] ? __lock_acquire+0x1af3/0x6320 [ 1496.067331][T29332] should_fail_alloc_page+0x50/0x60 [ 1496.067348][T29332] __alloc_pages_nodemask+0x1a1/0x910 [ 1496.067368][T29332] ? fs_reclaim_release+0xf/0x30 [ 1496.067389][T29332] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1496.067406][T29332] ? fs_reclaim_release+0xf/0x30 [ 1496.067427][T29332] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1496.067459][T29332] cache_grow_begin+0x90/0xc60 [ 1496.107961][T29336] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1496.110104][T29332] ? trace_hardirqs_off+0x62/0x240 [ 1496.110130][T29332] kmem_cache_alloc_trace+0x6b3/0x790 [ 1496.110153][T29332] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1496.153469][T29332] copy_mount_options+0x58/0x170 [ 1496.158432][T29332] __x64_sys_mount+0x15e/0x230 [ 1496.163217][T29332] do_syscall_64+0xfa/0x790 [ 1496.167851][T29332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1496.172997][T29385] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1496.173754][T29332] RIP: 0033:0x45c6c9 [ 1496.173771][T29332] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1496.173779][T29332] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1496.173795][T29332] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1496.173804][T29332] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1496.173812][T29332] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1496.173827][T29332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1496.196762][T29336] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1496.211468][T29332] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000003 [ 1496.230833][T29332] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:35 executing program 5 (fault-call:4 fault-nth:4): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:35 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x600) 10:11:35 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3) 10:11:35 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x800, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000200)={0xf}) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1496.571491][T29481] FAULT_INJECTION: forcing a failure. [ 1496.571491][T29481] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.623718][T29533] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1496.634379][T29481] CPU: 0 PID: 29481 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1496.644504][T29481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.654569][T29481] Call Trace: [ 1496.657882][T29481] dump_stack+0x197/0x210 [ 1496.662238][T29481] should_fail.cold+0x5/0xf [ 1496.666794][T29481] ? setup_fault_attr+0x1f0/0x1f0 [ 1496.671849][T29481] ? ___might_sleep+0x163/0x2c0 [ 1496.677201][T29481] __should_failslab+0xb7/0x100 [ 1496.679852][T29533] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1496.682099][T29481] should_failslab+0x9/0x14 [ 1496.682119][T29481] __kmalloc+0x2e0/0x770 [ 1496.682147][T29481] ? save_stack+0x5c/0x90 [ 1496.682165][T29481] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1496.682192][T29481] tomoyo_encode2.part.0+0xf5/0x400 10:11:36 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x700) [ 1496.719992][T29481] ? do_syscall_64+0xfa/0x790 [ 1496.724706][T29481] tomoyo_encode+0x2b/0x50 [ 1496.729144][T29481] tomoyo_mount_acl+0xe0/0x840 [ 1496.733922][T29481] ? debug_check_no_obj_freed+0x20a/0x441 [ 1496.739663][T29481] ? mark_lock+0xc2/0x1220 [ 1496.744105][T29481] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 1496.749671][T29481] ? __kasan_check_read+0x11/0x20 [ 1496.754709][T29481] ? __lock_acquire+0x8a0/0x6320 [ 1496.759771][T29481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1496.766026][T29481] ? debug_smp_processor_id+0x33/0x18a [ 1496.771504][T29481] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1496.777852][T29481] ? lock_acquire+0x190/0x410 [ 1496.782546][T29481] ? tomoyo_mount_permission+0x10a/0x400 [ 1496.788210][T29481] tomoyo_mount_permission+0x16a/0x400 [ 1496.793677][T29481] ? tomoyo_mount_permission+0x10a/0x400 [ 1496.799319][T29481] ? tomoyo_mount_acl+0x840/0x840 [ 1496.804392][T29481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1496.810676][T29481] ? strncpy_from_user+0x2d1/0x410 [ 1496.815785][T29481] tomoyo_sb_mount+0x35/0x40 [ 1496.820384][T29481] security_sb_mount+0x87/0xd0 [ 1496.825209][T29481] do_mount+0x1d4/0x1b50 [ 1496.829470][T29481] ? copy_mount_string+0x40/0x40 [ 1496.834444][T29481] ? _copy_from_user+0x12c/0x1a0 [ 1496.839381][T29481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1496.845657][T29481] __x64_sys_mount+0x192/0x230 [ 1496.850466][T29481] do_syscall_64+0xfa/0x790 [ 1496.854965][T29481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1496.860888][T29481] RIP: 0033:0x45c6c9 [ 1496.864766][T29481] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1496.884372][T29481] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1496.892792][T29481] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1496.900961][T29481] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1496.909367][T29481] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1496.917384][T29481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1496.925346][T29481] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000004 [ 1496.967839][T29565] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1497.100876][T29570] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1497.122990][T29570] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x6]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:37 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4) 10:11:37 executing program 5 (fault-call:4 fault-nth:5): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:37 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x804) 10:11:37 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x0, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000600)={r3, @in={{0x2, 0x0, @loopback}}}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x2c3}, 0x8) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r5, r6+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1497.682977][T29583] xt_TCPMSS: Only works on TCP SYN packets [ 1497.733660][T29582] FAULT_INJECTION: forcing a failure. [ 1497.733660][T29582] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.753777][T29581] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1497.776869][T29582] CPU: 0 PID: 29582 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1497.786800][T29582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.796864][T29582] Call Trace: [ 1497.800177][T29582] dump_stack+0x197/0x210 [ 1497.800249][T29666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1497.804522][T29582] should_fail.cold+0x5/0xf [ 1497.804546][T29582] ? setup_fault_attr+0x1f0/0x1f0 [ 1497.828227][T29582] ? ___might_sleep+0x163/0x2c0 10:11:37 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc00) 10:11:37 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x5) [ 1497.833099][T29582] __should_failslab+0xb7/0x100 [ 1497.838395][T29582] should_failslab+0x9/0x14 [ 1497.842910][T29582] __kmalloc+0x2e0/0x770 [ 1497.847172][T29582] ? save_stack+0x5c/0x90 [ 1497.851514][T29582] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1497.856909][T29582] tomoyo_encode2.part.0+0xf5/0x400 [ 1497.862116][T29582] ? do_syscall_64+0xfa/0x790 [ 1497.867283][T29582] tomoyo_encode+0x2b/0x50 [ 1497.871717][T29582] tomoyo_mount_acl+0xe0/0x840 [ 1497.876493][T29582] ? debug_check_no_obj_freed+0x20a/0x441 [ 1497.882221][T29582] ? mark_lock+0xc2/0x1220 [ 1497.886645][T29582] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 1497.892178][T29582] ? __kasan_check_read+0x11/0x20 [ 1497.897315][T29582] ? __lock_acquire+0x8a0/0x6320 [ 1497.902239][T29582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1497.908462][T29582] ? debug_smp_processor_id+0x33/0x18a [ 1497.913904][T29582] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1497.920058][T29582] ? lock_acquire+0x190/0x410 [ 1497.924719][T29582] ? tomoyo_mount_permission+0x10a/0x400 [ 1497.930356][T29582] tomoyo_mount_permission+0x16a/0x400 [ 1497.935810][T29582] ? tomoyo_mount_permission+0x10a/0x400 [ 1497.941498][T29582] ? tomoyo_mount_acl+0x840/0x840 [ 1497.946533][T29582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1497.952770][T29582] ? strncpy_from_user+0x2d1/0x410 [ 1497.957887][T29582] tomoyo_sb_mount+0x35/0x40 [ 1497.962463][T29582] security_sb_mount+0x87/0xd0 [ 1497.967220][T29582] do_mount+0x1d4/0x1b50 [ 1497.971464][T29582] ? copy_mount_string+0x40/0x40 [ 1497.976401][T29582] ? _copy_from_user+0x12c/0x1a0 [ 1497.981322][T29582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1497.987581][T29582] __x64_sys_mount+0x192/0x230 [ 1497.992346][T29582] do_syscall_64+0xfa/0x790 [ 1497.996851][T29582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1498.002740][T29582] RIP: 0033:0x45c6c9 [ 1498.006618][T29582] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1498.026204][T29582] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1498.034605][T29582] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1498.042566][T29582] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1498.050545][T29582] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1498.058497][T29582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1498.066466][T29582] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000005 10:11:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:37 executing program 5 (fault-call:4 fault-nth:6): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1498.245171][T29739] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:37 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+30000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r4 = accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000001c0)) [ 1498.351078][T29739] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1498.361765][T29824] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1498.399714][T29815] FAULT_INJECTION: forcing a failure. [ 1498.399714][T29815] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.427880][T29815] CPU: 1 PID: 29815 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1498.437804][T29815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1498.447873][T29815] Call Trace: [ 1498.451187][T29815] dump_stack+0x197/0x210 [ 1498.455541][T29815] should_fail.cold+0x5/0xf [ 1498.460063][T29815] ? setup_fault_attr+0x1f0/0x1f0 [ 1498.465101][T29815] ? ___might_sleep+0x163/0x2c0 [ 1498.469976][T29815] __should_failslab+0xb7/0x100 [ 1498.474844][T29815] should_failslab+0x9/0x14 [ 1498.479361][T29815] __kmalloc+0x2e0/0x770 [ 1498.483628][T29815] ? save_stack+0x5c/0x90 [ 1498.487968][T29815] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1498.493367][T29815] tomoyo_encode2.part.0+0xf5/0x400 [ 1498.498579][T29815] ? do_syscall_64+0xfa/0x790 [ 1498.503282][T29815] tomoyo_encode+0x2b/0x50 [ 1498.507706][T29815] tomoyo_mount_acl+0xe0/0x840 [ 1498.512477][T29815] ? debug_check_no_obj_freed+0x20a/0x441 [ 1498.518212][T29815] ? mark_lock+0xc2/0x1220 [ 1498.522645][T29815] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 1498.528207][T29815] ? __kasan_check_read+0x11/0x20 [ 1498.533241][T29815] ? __lock_acquire+0x8a0/0x6320 [ 1498.538200][T29815] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1498.544454][T29815] ? debug_smp_processor_id+0x33/0x18a [ 1498.549932][T29815] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1498.556135][T29815] ? lock_acquire+0x190/0x410 [ 1498.560824][T29815] ? tomoyo_mount_permission+0x10a/0x400 [ 1498.566487][T29815] tomoyo_mount_permission+0x16a/0x400 [ 1498.571957][T29815] ? tomoyo_mount_permission+0x10a/0x400 [ 1498.577609][T29815] ? tomoyo_mount_acl+0x840/0x840 [ 1498.582676][T29815] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1498.588934][T29815] ? strncpy_from_user+0x2d1/0x410 [ 1498.594067][T29815] tomoyo_sb_mount+0x35/0x40 [ 1498.598684][T29815] security_sb_mount+0x87/0xd0 [ 1498.603478][T29815] do_mount+0x1d4/0x1b50 [ 1498.607755][T29815] ? copy_mount_string+0x40/0x40 [ 1498.612711][T29815] ? _copy_from_user+0x12c/0x1a0 [ 1498.617688][T29815] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1498.623959][T29815] __x64_sys_mount+0x192/0x230 [ 1498.628747][T29815] do_syscall_64+0xfa/0x790 [ 1498.633270][T29815] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1498.639164][T29815] RIP: 0033:0x45c6c9 [ 1498.643068][T29815] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1498.662677][T29815] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1498.671118][T29815] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1498.679099][T29815] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1498.687081][T29815] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 10:11:38 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000380)="d9bfc92d36e4f57c00319074d62bb6fc2485ba728a8a440281c583bb38e78211f2f7fd17fcf5fe70a3a978521bf320b85ee524076cdf4d8f5f180a1f1cc98db4bedd0c5ffc27cd8cc45367f40dfbfaf96f43c6f06867998da967beeadc7f2a015feb076ca1a5", 0x66) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140)=""/46, 0x2e, 0x20, 0x7, 0x1000000, 0x200000, 0x3}}, 0x120) [ 1498.695496][T29815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1498.703472][T29815] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000006 10:11:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x7]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:38 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6) 10:11:38 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x1200) 10:11:38 executing program 5 (fault-call:4 fault-nth:7): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:38 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000200)) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x2001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001800)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x34, r7, 0x3ab97855f46285f, 0x0, 0x0, {}, [@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x184, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) [ 1499.332323][T29934] FAULT_INJECTION: forcing a failure. [ 1499.332323][T29934] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.372223][T29938] xt_TCPMSS: Only works on TCP SYN packets [ 1499.415960][T29934] CPU: 0 PID: 29934 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1499.425905][T29934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.436089][T29934] Call Trace: [ 1499.439415][T29934] dump_stack+0x197/0x210 [ 1499.443775][T29934] should_fail.cold+0x5/0xf [ 1499.448306][T29934] ? setup_fault_attr+0x1f0/0x1f0 [ 1499.453382][T29934] ? ___might_sleep+0x163/0x2c0 [ 1499.458265][T29934] __should_failslab+0xb7/0x100 [ 1499.463147][T29934] should_failslab+0x9/0x14 [ 1499.467674][T29934] __kmalloc+0x2e0/0x770 [ 1499.471953][T29934] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1499.477374][T29934] tomoyo_encode2.part.0+0xf5/0x400 [ 1499.482584][T29934] ? __get_fs_type+0x9a/0xd0 [ 1499.487203][T29934] tomoyo_encode+0x2b/0x50 [ 1499.491664][T29934] tomoyo_mount_acl+0x320/0x840 [ 1499.496529][T29934] ? debug_check_no_obj_freed+0x20a/0x441 [ 1499.502290][T29934] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 1499.507960][T29934] ? __kasan_check_read+0x11/0x20 [ 1499.513004][T29934] ? __lock_acquire+0x8a0/0x6320 [ 1499.517966][T29934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1499.524283][T29934] ? debug_smp_processor_id+0x33/0x18a [ 1499.529974][T29934] ? lock_acquire+0x190/0x410 [ 1499.534647][T29934] ? tomoyo_mount_permission+0x10a/0x400 [ 1499.539865][T29942] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1499.540293][T29934] tomoyo_mount_permission+0x16a/0x400 [ 1499.540308][T29934] ? tomoyo_mount_permission+0x10a/0x400 [ 1499.540329][T29934] ? tomoyo_mount_acl+0x840/0x840 [ 1499.567212][T29934] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1499.573568][T29934] ? strncpy_from_user+0x2d1/0x410 [ 1499.578720][T29934] tomoyo_sb_mount+0x35/0x40 [ 1499.583412][T29934] security_sb_mount+0x87/0xd0 [ 1499.588202][T29934] do_mount+0x1d4/0x1b50 [ 1499.592514][T29934] ? copy_mount_string+0x40/0x40 [ 1499.597468][T29934] ? _copy_from_user+0x12c/0x1a0 [ 1499.602407][T29934] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1499.608684][T29934] __x64_sys_mount+0x192/0x230 [ 1499.613512][T29934] do_syscall_64+0xfa/0x790 [ 1499.618119][T29934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1499.624001][T29934] RIP: 0033:0x45c6c9 [ 1499.627944][T29934] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1499.647609][T29934] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1499.656159][T29934] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 10:11:39 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x264e) 10:11:39 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000480)='\xbd\xfbUv\x9a\x00\x00\x00\x002G\x83\xfd\x00\x00\x00\x80\x00\x00\b\x00?\xb5\x1a\xff\x0e\xaf!\xe4\xb8D\x84$\"\xba\xe3\xab\xf0\x87\xb4\xa8\x16\xc8\xad\xbc\xf0v\xfdy6x\xf5\x90\x8a\xcdF\xa8\b\x98\xda\x90h\x00gM\xe7\x19\x172j\xbbG\xfa\x1a|\xdc[\xfd\xf9\x9f\xb8\x16\xde:Xn\xeb\x17\x1d\xaf\x10\xea\xcb!\x96KT\xf8\xda\x1d\xf0\xdf\xdc\x9ac\f\xbc\xf56~I\xfe\xa1\x86A\xfa\xd3[y<\xbe\xa1\x12\xb4L\xe2!M\x00)\x03\x91\xe1\x9a\xbb!f\x04\xf1\xa5\xc4 \xf7\x8dBmjzr-\xf6\xca9\xadl') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1499.664123][T29934] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1499.672086][T29934] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1499.680051][T29934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1499.688022][T29934] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000007 10:11:39 executing program 5 (fault-call:4 fault-nth:8): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1499.718591][T29988] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:39 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7) [ 1499.925992][T30062] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1500.024796][T30069] FAULT_INJECTION: forcing a failure. [ 1500.024796][T30069] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.027543][T30062] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1500.054153][T30069] CPU: 0 PID: 30069 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1500.064084][T30069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.074149][T30069] Call Trace: [ 1500.077463][T30069] dump_stack+0x197/0x210 [ 1500.081822][T30069] should_fail.cold+0x5/0xf [ 1500.086350][T30069] ? setup_fault_attr+0x1f0/0x1f0 [ 1500.091399][T30069] ? ___might_sleep+0x163/0x2c0 [ 1500.096283][T30069] __should_failslab+0xb7/0x100 [ 1500.101153][T30069] should_failslab+0x9/0x14 [ 1500.105673][T30069] __kmalloc+0x2e0/0x770 [ 1500.109947][T30069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1500.116201][T30069] ? d_absolute_path+0x11b/0x170 [ 1500.121151][T30069] ? __d_path+0x140/0x140 [ 1500.125494][T30069] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1500.128782][T30153] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1500.130898][T30069] tomoyo_encode2.part.0+0xf5/0x400 [ 1500.130924][T30069] tomoyo_encode+0x2b/0x50 [ 1500.154777][T30069] tomoyo_realpath_from_path+0x19c/0x660 [ 1500.160452][T30069] tomoyo_mount_acl+0x149/0x840 [ 1500.165410][T30069] ? debug_check_no_obj_freed+0x20a/0x441 [ 1500.171152][T30069] ? mark_lock+0xc2/0x1220 [ 1500.175594][T30069] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 1500.181165][T30069] ? __kasan_check_read+0x11/0x20 [ 1500.186211][T30069] ? __lock_acquire+0x8a0/0x6320 [ 1500.191178][T30069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1500.197434][T30069] ? debug_smp_processor_id+0x33/0x18a [ 1500.203015][T30069] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1500.209223][T30069] ? lock_acquire+0x190/0x410 [ 1500.213915][T30069] ? tomoyo_mount_permission+0x10a/0x400 [ 1500.219589][T30069] tomoyo_mount_permission+0x16a/0x400 10:11:39 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8) [ 1500.225061][T30069] ? tomoyo_mount_permission+0x10a/0x400 [ 1500.230720][T30069] ? tomoyo_mount_acl+0x840/0x840 [ 1500.237082][T30069] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1500.243414][T30069] ? strncpy_from_user+0x2d1/0x410 [ 1500.248527][T30069] tomoyo_sb_mount+0x35/0x40 [ 1500.253119][T30069] security_sb_mount+0x87/0xd0 [ 1500.257886][T30069] do_mount+0x1d4/0x1b50 [ 1500.262130][T30069] ? copy_mount_string+0x40/0x40 [ 1500.267061][T30069] ? _copy_from_user+0x12c/0x1a0 [ 1500.272000][T30069] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1500.278672][T30069] __x64_sys_mount+0x192/0x230 [ 1500.283430][T30069] do_syscall_64+0xfa/0x790 [ 1500.287962][T30069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1500.293858][T30069] RIP: 0033:0x45c6c9 [ 1500.297744][T30069] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1500.317336][T30069] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1500.325741][T30069] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1500.333732][T30069] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1500.341695][T30069] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1500.349659][T30069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1500.357883][T30069] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000008 [ 1500.406214][T30069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1500.561546][T30179] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x8]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:40 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3f00) 10:11:40 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) io_setup(0x4f, &(0x7f0000000140)=0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) connect(r6, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x1, @empty, 'ip6gretap0\x00'}}, 0x80) io_pgetevents(r5, 0x400, 0x4, &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r11 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000280)={r10, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) connect$packet(r0, &(0x7f0000000580)={0x11, 0x3, r10, 0x1, 0x7, 0x6, @remote}, 0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:40 executing program 5 (fault-call:4 fault-nth:9): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:40 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc) [ 1500.994772][T30181] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1500.998633][T30188] xt_TCPMSS: Only works on TCP SYN packets [ 1501.037648][T30191] FAULT_INJECTION: forcing a failure. [ 1501.037648][T30191] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.042245][T30193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1501.075226][T30207] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1501.091791][T30191] CPU: 1 PID: 30191 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1501.101880][T30191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.112048][T30191] Call Trace: [ 1501.115368][T30191] dump_stack+0x197/0x210 [ 1501.119730][T30191] should_fail.cold+0x5/0xf [ 1501.124256][T30191] ? setup_fault_attr+0x1f0/0x1f0 [ 1501.125698][T30181] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1501.129399][T30191] ? ___might_sleep+0x163/0x2c0 [ 1501.129426][T30191] __should_failslab+0xb7/0x100 [ 1501.129445][T30191] should_failslab+0x9/0x14 [ 1501.129463][T30191] kmem_cache_alloc_trace+0x2d3/0x790 [ 1501.129481][T30191] ? lockdep_init_map+0x1be/0x6d0 [ 1501.129524][T30191] legacy_init_fs_context+0x48/0xe0 [ 1501.129537][T30191] ? generic_parse_monolithic+0x200/0x200 [ 1501.129558][T30191] alloc_fs_context+0x52d/0x890 [ 1501.184963][T30191] fs_context_for_mount+0x25/0x30 [ 1501.190004][T30191] do_mount+0x11b2/0x1b50 [ 1501.194349][T30191] ? copy_mount_string+0x40/0x40 [ 1501.199352][T30191] ? _copy_from_user+0x12c/0x1a0 [ 1501.204293][T30191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1501.210644][T30191] __x64_sys_mount+0x192/0x230 [ 1501.215419][T30191] do_syscall_64+0xfa/0x790 [ 1501.219933][T30191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1501.225855][T30191] RIP: 0033:0x45c6c9 [ 1501.229752][T30191] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1501.249453][T30191] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1501.257884][T30191] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1501.265862][T30191] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1501.273954][T30191] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 10:11:40 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4800) [ 1501.281982][T30191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1501.289952][T30191] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000009 10:11:40 executing program 5 (fault-call:4 fault-nth:10): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:40 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x12) 10:11:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1501.578387][T30309] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1501.620007][T30309] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1501.645622][T30414] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1501.661646][T30413] FAULT_INJECTION: forcing a failure. [ 1501.661646][T30413] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.681902][T30413] CPU: 0 PID: 30413 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1501.691828][T30413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.702002][T30413] Call Trace: [ 1501.705319][T30413] dump_stack+0x197/0x210 [ 1501.709685][T30413] should_fail.cold+0x5/0xf [ 1501.714306][T30413] ? setup_fault_attr+0x1f0/0x1f0 10:11:41 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4c00) 10:11:41 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x30) [ 1501.719369][T30413] ? ___might_sleep+0x163/0x2c0 [ 1501.724255][T30413] __should_failslab+0xb7/0x100 [ 1501.729124][T30413] should_failslab+0x9/0x14 [ 1501.733645][T30413] __kmalloc+0x2e0/0x770 [ 1501.738026][T30413] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1501.743426][T30413] tomoyo_encode2.part.0+0xf5/0x400 [ 1501.748635][T30413] ? __get_fs_type+0x9a/0xd0 [ 1501.753243][T30413] tomoyo_encode+0x2b/0x50 [ 1501.757671][T30413] tomoyo_mount_acl+0x320/0x840 [ 1501.762654][T30413] ? debug_check_no_obj_freed+0x20a/0x441 [ 1501.768409][T30413] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 1501.773972][T30413] ? __kasan_check_read+0x11/0x20 [ 1501.779111][T30413] ? __lock_acquire+0x8a0/0x6320 [ 1501.784087][T30413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1501.790433][T30413] ? debug_smp_processor_id+0x33/0x18a [ 1501.796088][T30413] ? lock_acquire+0x190/0x410 [ 1501.800907][T30413] ? tomoyo_mount_permission+0x10a/0x400 [ 1501.806581][T30413] tomoyo_mount_permission+0x16a/0x400 [ 1501.812057][T30413] ? tomoyo_mount_permission+0x10a/0x400 [ 1501.817706][T30413] ? tomoyo_mount_acl+0x840/0x840 [ 1501.822849][T30413] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1501.829104][T30413] ? strncpy_from_user+0x2d1/0x410 [ 1501.834224][T30413] tomoyo_sb_mount+0x35/0x40 [ 1501.838810][T30413] security_sb_mount+0x87/0xd0 [ 1501.843587][T30413] do_mount+0x1d4/0x1b50 [ 1501.847823][T30413] ? copy_mount_string+0x40/0x40 [ 1501.852760][T30413] ? _copy_from_user+0x12c/0x1a0 [ 1501.857729][T30413] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1501.864062][T30413] __x64_sys_mount+0x192/0x230 [ 1501.868853][T30413] do_syscall_64+0xfa/0x790 [ 1501.873379][T30413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1501.879280][T30413] RIP: 0033:0x45c6c9 [ 1501.883168][T30413] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1501.902758][T30413] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1501.911173][T30413] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1501.919140][T30413] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1501.927103][T30413] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1501.935157][T30413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1501.943130][T30413] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000000a [ 1502.006930][T30219] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1502.154316][T30496] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1502.186441][T30496] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1502.194407][T30524] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x10]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:42 executing program 5 (fault-call:4 fault-nth:11): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:42 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x300) 10:11:42 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4e26) 10:11:42 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000140)=@bpq0='bpq0\x00', 0x10) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108a6db660000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000345d629ebff1229f5f73cda067db4dabffc27c1df0b3821bfcb2c8096f515f196274b1ddb0876e17cf770bec04e4788be84d000000000000000103000000000000899d7a9c5111756c10112228c93a1070014eba07a5"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1502.718872][T30536] xt_TCPMSS: Only works on TCP SYN packets [ 1502.738000][T30534] FAULT_INJECTION: forcing a failure. [ 1502.738000][T30534] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.790647][T30534] CPU: 1 PID: 30534 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1502.800574][T30534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.810153][T30540] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1502.810642][T30534] Call Trace: [ 1502.824726][T30534] dump_stack+0x197/0x210 [ 1502.829096][T30534] should_fail.cold+0x5/0xf [ 1502.833633][T30534] ? setup_fault_attr+0x1f0/0x1f0 [ 1502.838679][T30534] ? ___might_sleep+0x163/0x2c0 [ 1502.843551][T30534] __should_failslab+0xb7/0x100 [ 1502.848429][T30534] should_failslab+0x9/0x14 [ 1502.852948][T30534] kmem_cache_alloc_trace+0x2d3/0x790 [ 1502.858340][T30534] ? lock_downgrade+0x920/0x920 [ 1502.863208][T30534] ? rwlock_bug.part.0+0x90/0x90 [ 1502.868178][T30534] alloc_super+0x55/0x910 [ 1502.872538][T30534] sget+0x117/0x560 [ 1502.876371][T30534] ? get_anon_bdev+0xc0/0xc0 [ 1502.880985][T30534] ? ovl_show_options+0x5f0/0x5f0 [ 1502.886030][T30534] mount_nodev+0x31/0x110 [ 1502.890384][T30534] ovl_mount+0x2d/0x40 [ 1502.892343][T30540] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1502.894472][T30534] ? ovl_own_xattr_set+0x10/0x10 [ 1502.894493][T30534] legacy_get_tree+0x108/0x220 [ 1502.894518][T30534] vfs_get_tree+0x8e/0x300 [ 1502.894537][T30534] do_mount+0x135a/0x1b50 [ 1502.894563][T30534] ? copy_mount_string+0x40/0x40 [ 1502.932095][T30534] ? _copy_from_user+0x12c/0x1a0 [ 1502.937074][T30534] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1502.943355][T30534] __x64_sys_mount+0x192/0x230 [ 1502.948224][T30534] do_syscall_64+0xfa/0x790 [ 1502.952754][T30534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1502.958660][T30534] RIP: 0033:0x45c6c9 [ 1502.962569][T30534] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1502.982313][T30534] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:11:42 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6800) [ 1502.990756][T30534] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1502.998738][T30534] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1503.006719][T30534] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1503.014700][T30534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1503.022681][T30534] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000000b 10:11:42 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) write$UHID_INPUT2(r4, &(0x7f0000000480)={0xc, {0xb9, "ee3b55d3bf0dc4ef4d98f21de72744026028366560effda8546e051ff06fc606f230e1ca6d0cf4ce6baadb3d6097a984270f0832db59acacb4c9403ffcd89729dcbc8486d54cf48f0aec2eccc0ab01856e87831b28de2194225ab9b126ed42ee6ca580fc4270795d3d2bc6a43c7685f37550bff1ceb0ce2a6bebdc686464fe5a943ddb503c3fc22513e5bcb97b808fbb5594732c337034912a6313db23723228e5526865ddf8c2e9db647b171ee52ceb1fded58bad5e69b233"}}, 0xbf) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) r5 = creat(&(0x7f00000001c0)='./bus/file0\x00', 0x1b8) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r5}) getsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1503.042795][T30725] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:42 executing program 5 (fault-call:4 fault-nth:12): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:42 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x408) [ 1503.332976][T30812] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1503.336111][T30807] FAULT_INJECTION: forcing a failure. [ 1503.336111][T30807] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.364927][T30807] CPU: 1 PID: 30807 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1503.374847][T30807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.384912][T30807] Call Trace: [ 1503.388225][T30807] dump_stack+0x197/0x210 [ 1503.392583][T30807] should_fail.cold+0x5/0xf [ 1503.397109][T30807] ? setup_fault_attr+0x1f0/0x1f0 [ 1503.402157][T30807] ? ___might_sleep+0x163/0x2c0 [ 1503.407033][T30807] __should_failslab+0xb7/0x100 [ 1503.411896][T30807] should_failslab+0x9/0x14 [ 1503.416417][T30807] kmem_cache_alloc_trace+0x2d3/0x790 [ 1503.421802][T30807] ? lockdep_init_map+0x1be/0x6d0 [ 1503.426854][T30807] legacy_init_fs_context+0x48/0xe0 [ 1503.432099][T30807] ? generic_parse_monolithic+0x200/0x200 [ 1503.437834][T30807] alloc_fs_context+0x52d/0x890 [ 1503.441098][T30812] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1503.442718][T30807] fs_context_for_mount+0x25/0x30 [ 1503.461865][T30807] do_mount+0x11b2/0x1b50 [ 1503.466224][T30807] ? copy_mount_string+0x40/0x40 [ 1503.471193][T30807] ? _copy_from_user+0x12c/0x1a0 [ 1503.476155][T30807] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 10:11:42 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x18) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x22f, 0x4) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x94a2f7a2d623269d, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000003c0)={0x1, 0x3}, 0x2) [ 1503.482430][T30807] __x64_sys_mount+0x192/0x230 [ 1503.487226][T30807] do_syscall_64+0xfa/0x790 [ 1503.491758][T30807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1503.497687][T30807] RIP: 0033:0x45c6c9 [ 1503.501685][T30807] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1503.521298][T30807] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1503.529724][T30807] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1503.537710][T30807] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1503.545691][T30807] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1503.553684][T30807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1503.561675][T30807] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000000c [ 1503.577202][T30970] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x11]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:43 executing program 5 (fault-call:4 fault-nth:13): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:43 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6c00) 10:11:43 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x500) 10:11:43 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) r3 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1504.278396][T30988] xt_TCPMSS: Only works on TCP SYN packets [ 1504.283778][T30992] FAULT_INJECTION: forcing a failure. [ 1504.283778][T30992] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.308936][T30995] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1504.341373][T31033] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1504.355747][T30992] CPU: 0 PID: 30992 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1504.365711][T30992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.375785][T30992] Call Trace: [ 1504.379094][T30992] dump_stack+0x197/0x210 [ 1504.383451][T30992] should_fail.cold+0x5/0xf [ 1504.388079][T30992] ? setup_fault_attr+0x1f0/0x1f0 [ 1504.393127][T30992] ? ___might_sleep+0x163/0x2c0 [ 1504.397141][T30995] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1504.397996][T30992] __should_failslab+0xb7/0x100 [ 1504.398018][T30992] should_failslab+0x9/0x14 [ 1504.398036][T30992] __kmalloc_track_caller+0x2dc/0x760 [ 1504.398058][T30992] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1504.432705][T30992] ? vfs_parse_fs_string+0xe1/0x170 [ 1504.437928][T30992] kmemdup_nul+0x31/0xa0 [ 1504.442194][T30992] vfs_parse_fs_string+0xe1/0x170 [ 1504.447268][T30992] ? vfs_parse_fs_param+0x610/0x610 [ 1504.452484][T30992] ? legacy_init_fs_context+0x9d/0xe0 [ 1504.457900][T30992] do_mount+0x6b4/0x1b50 [ 1504.462174][T30992] ? copy_mount_string+0x40/0x40 [ 1504.467247][T30992] ? _copy_from_user+0x12c/0x1a0 [ 1504.472222][T30992] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1504.478600][T30992] __x64_sys_mount+0x192/0x230 [ 1504.483391][T30992] do_syscall_64+0xfa/0x790 [ 1504.488053][T30992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1504.493950][T30992] RIP: 0033:0x45c6c9 [ 1504.497854][T30992] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1504.517467][T30992] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1504.525898][T30992] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1504.533888][T30992] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 10:11:43 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = gettid() r1 = gettid() sched_getparam(r1, &(0x7f0000000100)) r2 = getpgrp(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) kcmp(r0, r2, 0x1, 0xffffffffffffffff, r3) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r5, r6+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r7 = socket$inet(0x2, 0x1, 0x80) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) sendto$l2tp6(r7, &(0x7f0000000380)="6ddcf88bfad0b4ba5a67e5503eb2d4eb1b5d28700c6889c6b655b5c1232f68e3f856d150abbc3bd9b89754dd59a4072b2a0a6918511f4c3011ca5ffd9d605dc6054b7d989a4fda8cd971c2e6984bf67321807e46077fcc786c5ec8a8a97865d26e2eb7e72d3f81aa7f155d3d9f4a8975ea8c", 0x72, 0x10, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @mcast2, 0x2, 0x1}, 0x20) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:43 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7400) 10:11:43 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x600) 10:11:43 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r2) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r4) mount$9p_xen(&(0x7f0000000140)='syz\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000380)='9p\x00', 0x2000, &(0x7f0000000480)={'trans=xen,', {[{@version_9p2000='version=9p2000'}, {@mmap='mmap'}, {@noextend='noextend'}], [{@euid_gt={'euid>', r2}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@appraise_type='appraise_type=imasig'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/dlm-control\x00'}}]}}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r5, r6+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1504.542065][T30992] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1504.550179][T30992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1504.558265][T30992] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000000d 10:11:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:44 executing program 5 (fault-call:4 fault-nth:14): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1504.857637][T31127] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1504.866252][T31133] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1504.901789][T31128] FAULT_INJECTION: forcing a failure. [ 1504.901789][T31128] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.943665][T31128] CPU: 1 PID: 31128 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1504.946249][T31127] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1504.953720][T31128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.953728][T31128] Call Trace: [ 1504.953756][T31128] dump_stack+0x197/0x210 [ 1504.953784][T31128] should_fail.cold+0x5/0xf [ 1504.953807][T31128] ? setup_fault_attr+0x1f0/0x1f0 [ 1504.953832][T31128] ? ___might_sleep+0x163/0x2c0 [ 1504.953858][T31128] __should_failslab+0xb7/0x100 [ 1504.953876][T31128] should_failslab+0x9/0x14 [ 1504.953895][T31128] kmem_cache_alloc_trace+0x2d3/0x790 [ 1504.953915][T31128] ? lock_downgrade+0x920/0x920 [ 1505.019804][T31128] ? rwlock_bug.part.0+0x90/0x90 [ 1505.024778][T31128] alloc_super+0x55/0x910 [ 1505.029142][T31128] sget+0x117/0x560 [ 1505.032963][T31128] ? get_anon_bdev+0xc0/0xc0 [ 1505.037569][T31128] ? ovl_show_options+0x5f0/0x5f0 [ 1505.042615][T31128] mount_nodev+0x31/0x110 [ 1505.046964][T31128] ovl_mount+0x2d/0x40 [ 1505.051073][T31128] ? ovl_own_xattr_set+0x10/0x10 [ 1505.056046][T31128] legacy_get_tree+0x108/0x220 [ 1505.060856][T31128] vfs_get_tree+0x8e/0x300 [ 1505.065297][T31128] do_mount+0x135a/0x1b50 [ 1505.069658][T31128] ? copy_mount_string+0x40/0x40 [ 1505.074613][T31128] ? _copy_from_user+0x12c/0x1a0 [ 1505.079571][T31128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1505.085834][T31128] __x64_sys_mount+0x192/0x230 [ 1505.090620][T31128] do_syscall_64+0xfa/0x790 [ 1505.095150][T31128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1505.101055][T31128] RIP: 0033:0x45c6c9 [ 1505.104957][T31128] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1505.124767][T31128] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1505.133189][T31128] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1505.141184][T31128] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1505.149165][T31128] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1505.157143][T31128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1505.165122][T31128] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000000e 10:11:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x33]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:45 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r0}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x8001, 0x6, 0x4, 0x1c, 0x1b, "c2d3bfc3dd81d720"}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:45 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7a00) 10:11:45 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x700) 10:11:45 executing program 5 (fault-call:4 fault-nth:15): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1505.853876][T31249] xt_TCPMSS: Only works on TCP SYN packets [ 1505.876489][T31245] FAULT_INJECTION: forcing a failure. [ 1505.876489][T31245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1505.889731][T31245] CPU: 1 PID: 31245 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1505.899645][T31245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.909708][T31245] Call Trace: [ 1505.913028][T31245] dump_stack+0x197/0x210 [ 1505.917389][T31245] should_fail.cold+0x5/0xf [ 1505.921916][T31245] ? setup_fault_attr+0x1f0/0x1f0 [ 1505.926963][T31245] ? __kasan_check_read+0x11/0x20 [ 1505.932007][T31245] ? __lock_acquire+0x1af3/0x6320 [ 1505.937690][T31245] ? kmemdup_nul+0x31/0xa0 [ 1505.942118][T31245] ? vfs_parse_fs_string+0xe1/0x170 [ 1505.947339][T31245] ? do_mount+0x6b4/0x1b50 [ 1505.951768][T31245] ? __x64_sys_mount+0x192/0x230 [ 1505.956731][T31245] should_fail_alloc_page+0x50/0x60 [ 1505.962045][T31245] __alloc_pages_nodemask+0x1a1/0x910 [ 1505.967438][T31245] ? fs_reclaim_release+0xf/0x30 [ 1505.972498][T31245] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1505.978236][T31245] ? fs_reclaim_release+0xf/0x30 [ 1505.983024][T31257] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1505.983209][T31245] cache_grow_begin+0x90/0xc60 [ 1506.002106][T31245] ? trace_hardirqs_off+0x62/0x240 [ 1506.007283][T31245] kmem_cache_alloc_trace+0x6b3/0x790 [ 1506.012799][T31245] alloc_super+0x55/0x910 [ 1506.017208][T31245] sget+0x117/0x560 [ 1506.021033][T31245] ? get_anon_bdev+0xc0/0xc0 [ 1506.025648][T31245] ? ovl_show_options+0x5f0/0x5f0 [ 1506.030687][T31245] mount_nodev+0x31/0x110 [ 1506.035045][T31245] ovl_mount+0x2d/0x40 [ 1506.039136][T31245] ? ovl_own_xattr_set+0x10/0x10 [ 1506.044091][T31245] legacy_get_tree+0x108/0x220 [ 1506.048884][T31245] vfs_get_tree+0x8e/0x300 [ 1506.053429][T31245] do_mount+0x135a/0x1b50 [ 1506.057821][T31245] ? copy_mount_string+0x40/0x40 [ 1506.062778][T31245] ? _copy_from_user+0x12c/0x1a0 [ 1506.067743][T31245] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1506.074020][T31245] __x64_sys_mount+0x192/0x230 [ 1506.078825][T31245] do_syscall_64+0xfa/0x790 [ 1506.083358][T31245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1506.089260][T31245] RIP: 0033:0x45c6c9 10:11:45 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x804) 10:11:45 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x6a) [ 1506.093169][T31245] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1506.112783][T31245] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1506.121331][T31245] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1506.129323][T31245] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1506.129379][T31248] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1506.137309][T31245] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1506.137319][T31245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1506.137327][T31245] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000000f [ 1506.160903][T31245] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:45 executing program 5 (fault-call:4 fault-nth:16): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:45 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xf000) [ 1506.446709][T31447] FAULT_INJECTION: forcing a failure. [ 1506.446709][T31447] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.451821][T31477] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1506.502843][T31447] CPU: 1 PID: 31447 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1506.512777][T31447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.522857][T31447] Call Trace: [ 1506.526167][T31447] dump_stack+0x197/0x210 [ 1506.530521][T31447] should_fail.cold+0x5/0xf [ 1506.535047][T31447] ? setup_fault_attr+0x1f0/0x1f0 [ 1506.540217][T31447] ? ___might_sleep+0x163/0x2c0 [ 1506.545096][T31447] __should_failslab+0xb7/0x100 10:11:45 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000580)="97bc435301e896631569d70d2edee09f", 0x10) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f00000001c0)) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mq_timedreceive(r2, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r0, r1+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000540)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)={0x1, 0xc, 0x4, 0x40000000, 0x1f, {0x77359400}, {0x4, 0x0, 0xf9, 0x6, 0x1f, 0x6, "783c82aa"}, 0xc4a, 0x4, @userptr=0x7, 0xd024, 0x0, r5}) getsockopt$netlink(r6, 0x10e, 0xa, &(0x7f0000000480)=""/153, &(0x7f0000000140)=0x99) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1506.549966][T31447] should_failslab+0x9/0x14 [ 1506.554505][T31447] __kmalloc+0x2e0/0x770 [ 1506.558768][T31447] ? lockdep_init_map+0x1be/0x6d0 [ 1506.563914][T31447] ? prealloc_shrinker+0xa6/0x350 [ 1506.568967][T31447] prealloc_shrinker+0xa6/0x350 [ 1506.573839][T31447] alloc_super+0x77a/0x910 [ 1506.578287][T31447] sget+0x117/0x560 [ 1506.582122][T31447] ? get_anon_bdev+0xc0/0xc0 [ 1506.590212][T31447] ? ovl_show_options+0x5f0/0x5f0 [ 1506.595375][T31447] mount_nodev+0x31/0x110 [ 1506.599724][T31447] ovl_mount+0x2d/0x40 [ 1506.603817][T31447] ? ovl_own_xattr_set+0x10/0x10 [ 1506.608766][T31447] legacy_get_tree+0x108/0x220 [ 1506.613546][T31447] vfs_get_tree+0x8e/0x300 [ 1506.617981][T31447] do_mount+0x135a/0x1b50 [ 1506.622341][T31447] ? copy_mount_string+0x40/0x40 [ 1506.627310][T31447] ? _copy_from_user+0x12c/0x1a0 [ 1506.632262][T31447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1506.638525][T31447] __x64_sys_mount+0x192/0x230 [ 1506.643309][T31447] do_syscall_64+0xfa/0x790 [ 1506.647849][T31447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1506.653743][T31447] RIP: 0033:0x45c6c9 [ 1506.657649][T31447] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1506.677342][T31447] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1506.685761][T31447] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1506.693738][T31447] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 10:11:46 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc00) [ 1506.701464][T31481] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1506.701711][T31447] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1506.701720][T31447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1506.701730][T31447] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000010 [ 1506.794264][T31481] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1506.931532][T31490] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x38]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:46 executing program 5 (fault-call:4 fault-nth:17): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:46 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') rt_sigsuspend(&(0x7f0000000140)={[0x847]}, 0x8) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r1, r2+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:46 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff00) 10:11:46 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x1200) [ 1507.339143][T31506] xt_TCPMSS: Only works on TCP SYN packets [ 1507.368613][T31504] FAULT_INJECTION: forcing a failure. [ 1507.368613][T31504] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.390764][T31505] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1507.396550][T31538] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1507.439713][T31504] CPU: 0 PID: 31504 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1507.449935][T31504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.459998][T31504] Call Trace: [ 1507.463309][T31504] dump_stack+0x197/0x210 [ 1507.464521][T31505] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1507.467656][T31504] should_fail.cold+0x5/0xf [ 1507.467763][T31504] ? setup_fault_attr+0x1f0/0x1f0 10:11:46 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff01) [ 1507.467791][T31504] ? ___might_sleep+0x163/0x2c0 [ 1507.496290][T31504] __should_failslab+0xb7/0x100 [ 1507.501157][T31504] should_failslab+0x9/0x14 [ 1507.505668][T31504] kmem_cache_alloc_node_trace+0x274/0x750 [ 1507.511492][T31504] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1507.517328][T31504] __kmalloc_node+0x3d/0x70 [ 1507.521842][T31504] kvmalloc_node+0x68/0x100 [ 1507.526487][T31504] __list_lru_init+0x4d5/0x710 [ 1507.531285][T31504] alloc_super+0x7cc/0x910 [ 1507.535697][T31504] sget+0x117/0x560 [ 1507.539505][T31504] ? get_anon_bdev+0xc0/0xc0 [ 1507.544114][T31504] ? ovl_show_options+0x5f0/0x5f0 [ 1507.549165][T31504] mount_nodev+0x31/0x110 [ 1507.553517][T31504] ovl_mount+0x2d/0x40 [ 1507.557608][T31504] ? ovl_own_xattr_set+0x10/0x10 [ 1507.562560][T31504] legacy_get_tree+0x108/0x220 [ 1507.567348][T31504] vfs_get_tree+0x8e/0x300 [ 1507.571784][T31504] do_mount+0x135a/0x1b50 [ 1507.576149][T31504] ? copy_mount_string+0x40/0x40 [ 1507.581114][T31504] ? _copy_from_user+0x12c/0x1a0 10:11:46 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x2000) 10:11:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1507.586079][T31504] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1507.592338][T31504] __x64_sys_mount+0x192/0x230 [ 1507.597119][T31504] do_syscall_64+0xfa/0x790 [ 1507.601645][T31504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1507.607656][T31504] RIP: 0033:0x45c6c9 [ 1507.611560][T31504] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1507.631186][T31504] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1507.639611][T31504] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1507.647592][T31504] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1507.655573][T31504] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1507.663544][T31504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1507.671527][T31504] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000011 10:11:47 executing program 5 (fault-call:4 fault-nth:18): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1507.864921][T31647] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1507.869272][T31657] FAULT_INJECTION: forcing a failure. [ 1507.869272][T31657] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.922905][T31657] CPU: 0 PID: 31657 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1507.934292][T31657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.943721][T31647] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1507.944363][T31657] Call Trace: [ 1507.944398][T31657] dump_stack+0x197/0x210 [ 1507.944434][T31657] should_fail.cold+0x5/0xf 10:11:47 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3000) [ 1507.960585][T31729] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1507.962084][T31657] ? setup_fault_attr+0x1f0/0x1f0 [ 1507.962111][T31657] ? ___might_sleep+0x163/0x2c0 [ 1507.962144][T31657] __should_failslab+0xb7/0x100 [ 1507.999914][T31657] should_failslab+0x9/0x14 [ 1508.004432][T31657] kmem_cache_alloc_node_trace+0x274/0x750 [ 1508.010267][T31657] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1508.016108][T31657] __kmalloc_node+0x3d/0x70 [ 1508.020744][T31657] kvmalloc_node+0x68/0x100 [ 1508.025312][T31657] __list_lru_init+0x4d5/0x710 [ 1508.030103][T31657] alloc_super+0x7cc/0x910 [ 1508.034715][T31657] sget+0x117/0x560 [ 1508.038553][T31657] ? get_anon_bdev+0xc0/0xc0 [ 1508.043156][T31657] ? ovl_show_options+0x5f0/0x5f0 [ 1508.048217][T31657] mount_nodev+0x31/0x110 [ 1508.052566][T31657] ovl_mount+0x2d/0x40 [ 1508.056658][T31657] ? ovl_own_xattr_set+0x10/0x10 [ 1508.061615][T31657] legacy_get_tree+0x108/0x220 [ 1508.066483][T31657] vfs_get_tree+0x8e/0x300 [ 1508.070921][T31657] do_mount+0x135a/0x1b50 [ 1508.075295][T31657] ? copy_mount_string+0x40/0x40 [ 1508.080291][T31657] ? _copy_from_user+0x12c/0x1a0 [ 1508.085386][T31657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1508.091653][T31657] __x64_sys_mount+0x192/0x230 [ 1508.096462][T31657] do_syscall_64+0xfa/0x790 [ 1508.100992][T31657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1508.107068][T31657] RIP: 0033:0x45c6c9 [ 1508.110972][T31657] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1508.130681][T31657] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1508.139105][T31657] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1508.147083][T31657] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1508.155063][T31657] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1508.163053][T31657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:11:47 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xa000a0) [ 1508.171170][T31657] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000012 [ 1508.267689][T31790] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1508.458066][T31836] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1508.478780][T31836] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:48 executing program 5 (fault-call:4 fault-nth:19): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x313101, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x1, 0x80) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) read(r1, &(0x7f0000000140)=""/47, 0x2f) r3 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, [], [{0xffffffff, 0x8, 0xe7e, 0xffffffff, 0xd72, 0x2}, {0xfe000000, 0x69678e5a, 0x800, 0xc337, 0x9, 0x5}]}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000380)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000003c0)={'geneve1\x00', 0x20}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000540)={r5, r6+30000000}, 0x0) 10:11:48 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3f00) 10:11:48 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xf0ffff) [ 1508.957602][T31843] FAULT_INJECTION: forcing a failure. [ 1508.957602][T31843] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.983406][T31849] xt_TCPMSS: Only works on TCP SYN packets [ 1509.023925][T31843] CPU: 1 PID: 31843 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1509.032458][T31848] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1509.033863][T31843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.033871][T31843] Call Trace: [ 1509.033901][T31843] dump_stack+0x197/0x210 [ 1509.033933][T31843] should_fail.cold+0x5/0xf [ 1509.066853][T31843] ? setup_fault_attr+0x1f0/0x1f0 [ 1509.069501][T31929] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1509.071907][T31843] ? ___might_sleep+0x163/0x2c0 [ 1509.091038][T31843] __should_failslab+0xb7/0x100 [ 1509.096017][T31843] should_failslab+0x9/0x14 [ 1509.100560][T31843] kmem_cache_alloc_trace+0x2d3/0x790 [ 1509.106074][T31843] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1509.111912][T31843] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1509.117922][T31843] __list_lru_init+0x3fe/0x710 [ 1509.121221][T31848] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1509.122709][T31843] alloc_super+0x7cc/0x910 [ 1509.122738][T31843] sget+0x117/0x560 [ 1509.145111][T31843] ? get_anon_bdev+0xc0/0xc0 [ 1509.149827][T31843] ? ovl_show_options+0x5f0/0x5f0 [ 1509.154868][T31843] mount_nodev+0x31/0x110 [ 1509.159218][T31843] ovl_mount+0x2d/0x40 [ 1509.163304][T31843] ? ovl_own_xattr_set+0x10/0x10 [ 1509.168258][T31843] legacy_get_tree+0x108/0x220 10:11:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1509.173049][T31843] vfs_get_tree+0x8e/0x300 [ 1509.177603][T31843] do_mount+0x135a/0x1b50 [ 1509.181963][T31843] ? copy_mount_string+0x40/0x40 [ 1509.186920][T31843] ? _copy_from_user+0x12c/0x1a0 [ 1509.191880][T31843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1509.198142][T31843] __x64_sys_mount+0x192/0x230 [ 1509.202933][T31843] do_syscall_64+0xfa/0x790 [ 1509.207467][T31843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1509.213365][T31843] RIP: 0033:0x45c6c9 10:11:48 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x1000000) [ 1509.217270][T31843] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1509.236878][T31843] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1509.245303][T31843] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1509.253472][T31843] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1509.261447][T31843] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1509.269432][T31843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1509.277416][T31843] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000013 10:11:48 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff00) 10:11:48 executing program 5 (fault-call:4 fault-nth:20): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1509.428646][T32062] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1509.503047][T32062] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1509.554021][T32066] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:49 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x2000000) [ 1509.620458][T32069] FAULT_INJECTION: forcing a failure. [ 1509.620458][T32069] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.635370][T32069] CPU: 0 PID: 32069 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1509.645283][T32069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.655370][T32069] Call Trace: [ 1509.658678][T32069] dump_stack+0x197/0x210 [ 1509.663057][T32069] should_fail.cold+0x5/0xf [ 1509.667577][T32069] ? setup_fault_attr+0x1f0/0x1f0 [ 1509.672617][T32069] ? ___might_sleep+0x163/0x2c0 [ 1509.678192][T32069] __should_failslab+0xb7/0x100 [ 1509.683162][T32069] should_failslab+0x9/0x14 [ 1509.687683][T32069] kmem_cache_alloc_trace+0x2d3/0x790 [ 1509.693065][T32069] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1509.698867][T32069] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1509.704492][T32069] __list_lru_init+0x3fe/0x710 [ 1509.709394][T32069] alloc_super+0x7cc/0x910 [ 1509.713807][T32069] sget+0x117/0x560 [ 1509.717623][T32069] ? get_anon_bdev+0xc0/0xc0 [ 1509.722214][T32069] ? ovl_show_options+0x5f0/0x5f0 [ 1509.727225][T32069] mount_nodev+0x31/0x110 [ 1509.731539][T32069] ovl_mount+0x2d/0x40 [ 1509.735590][T32069] ? ovl_own_xattr_set+0x10/0x10 [ 1509.740525][T32069] legacy_get_tree+0x108/0x220 [ 1509.745281][T32069] vfs_get_tree+0x8e/0x300 [ 1509.749687][T32069] do_mount+0x135a/0x1b50 [ 1509.754008][T32069] ? copy_mount_string+0x40/0x40 [ 1509.758956][T32069] ? _copy_from_user+0x12c/0x1a0 [ 1509.763897][T32069] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1509.770151][T32069] __x64_sys_mount+0x192/0x230 [ 1509.774906][T32069] do_syscall_64+0xfa/0x790 [ 1509.779456][T32069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1509.785363][T32069] RIP: 0033:0x45c6c9 [ 1509.789280][T32069] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1509.808862][T32069] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:11:49 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff01) [ 1509.817264][T32069] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1509.825227][T32069] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1509.833190][T32069] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1509.841158][T32069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1509.849111][T32069] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000014 [ 1510.091707][T32177] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1510.115635][T32180] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1510.117191][T32179] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x2]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:49 executing program 5 (fault-call:4 fault-nth:21): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) mq_timedreceive(r1, &(0x7f0000000040)=""/34, 0x22, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) ioctl$SIOCRSACCEPT(r0, 0x89e3) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) 10:11:49 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff0f) 10:11:49 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3000000) [ 1510.340252][T32186] xt_TCPMSS: Only works on TCP SYN packets [ 1510.395208][T32193] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1510.417171][T32207] FAULT_INJECTION: forcing a failure. [ 1510.417171][T32207] name failslab, interval 1, probability 0, space 0, times 0 10:11:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1510.467065][T32299] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1510.497326][T32193] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1510.536214][T32207] CPU: 1 PID: 32207 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1510.546226][T32207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.556279][T32207] Call Trace: [ 1510.559586][T32207] dump_stack+0x197/0x210 [ 1510.564037][T32207] should_fail.cold+0x5/0xf [ 1510.568562][T32207] ? setup_fault_attr+0x1f0/0x1f0 [ 1510.573728][T32207] ? ___might_sleep+0x163/0x2c0 [ 1510.578606][T32207] __should_failslab+0xb7/0x100 10:11:50 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x200000) [ 1510.583904][T32207] should_failslab+0x9/0x14 [ 1510.588419][T32207] kmem_cache_alloc_trace+0x2d3/0x790 [ 1510.593811][T32207] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1510.599638][T32207] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1510.605298][T32207] __list_lru_init+0x3fe/0x710 [ 1510.610101][T32207] alloc_super+0x7cc/0x910 [ 1510.614540][T32207] sget+0x117/0x560 [ 1510.618362][T32207] ? get_anon_bdev+0xc0/0xc0 [ 1510.622968][T32207] ? ovl_show_options+0x5f0/0x5f0 [ 1510.628001][T32207] mount_nodev+0x31/0x110 [ 1510.632349][T32207] ovl_mount+0x2d/0x40 10:11:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x28000, 0x0) mq_unlink(&(0x7f0000000080)='!selinuxselinux\x00') r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000600)={0x0, 0x7, 0x980c}, 0x8) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={r2, r3+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x1, 0x80) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4c8801, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1dcd}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x118, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x401, @mcast1, 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x18}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x2000040}, 0x8000) openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x20300, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000400)={@multicast1, @multicast2}, &(0x7f0000000440)=0xc) [ 1510.636425][T32207] ? ovl_own_xattr_set+0x10/0x10 [ 1510.641361][T32207] legacy_get_tree+0x108/0x220 [ 1510.646133][T32207] vfs_get_tree+0x8e/0x300 [ 1510.650685][T32207] do_mount+0x135a/0x1b50 [ 1510.655479][T32207] ? copy_mount_string+0x40/0x40 [ 1510.660447][T32207] ? _copy_from_user+0x12c/0x1a0 [ 1510.665406][T32207] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1510.671681][T32207] __x64_sys_mount+0x192/0x230 [ 1510.676464][T32207] do_syscall_64+0xfa/0x790 [ 1510.680982][T32207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1510.686871][T32207] RIP: 0033:0x45c6c9 [ 1510.690769][T32207] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1510.710379][T32207] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1510.718807][T32207] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1510.726786][T32207] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1510.734898][T32207] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1510.742889][T32207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1510.750971][T32207] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000015 10:11:50 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4000000) 10:11:50 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3f00) [ 1510.978659][T32421] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1510.989744][T32423] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1511.029565][T32421] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:50 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x5000000) [ 1511.282012][T32427] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1511.370391][T32427] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x3]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:51 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xa000a0) 10:11:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:51 executing program 5 (fault-call:4 fault-nth:22): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x10]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:51 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6000000) [ 1511.783481][T32436] FAULT_INJECTION: forcing a failure. [ 1511.783481][T32436] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.787399][T32440] xt_TCPMSS: Only works on TCP SYN packets [ 1511.812281][T32436] CPU: 1 PID: 32436 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1511.822204][T32436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.832269][T32436] Call Trace: [ 1511.835583][T32436] dump_stack+0x197/0x210 [ 1511.839945][T32436] should_fail.cold+0x5/0xf [ 1511.844477][T32436] ? setup_fault_attr+0x1f0/0x1f0 [ 1511.849523][T32436] ? ___might_sleep+0x163/0x2c0 [ 1511.854447][T32436] __should_failslab+0xb7/0x100 [ 1511.859316][T32436] should_failslab+0x9/0x14 [ 1511.863836][T32436] kmem_cache_alloc_trace+0x2d3/0x790 [ 1511.869349][T32436] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1511.875289][T32436] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1511.880944][T32436] __list_lru_init+0x3fe/0x710 [ 1511.885852][T32436] alloc_super+0x7cc/0x910 [ 1511.890290][T32436] sget+0x117/0x560 [ 1511.894124][T32436] ? get_anon_bdev+0xc0/0xc0 [ 1511.898734][T32436] ? ovl_show_options+0x5f0/0x5f0 [ 1511.903772][T32436] mount_nodev+0x31/0x110 [ 1511.908129][T32436] ovl_mount+0x2d/0x40 [ 1511.914476][T32436] ? ovl_own_xattr_set+0x10/0x10 [ 1511.919432][T32436] legacy_get_tree+0x108/0x220 [ 1511.924221][T32436] vfs_get_tree+0x8e/0x300 [ 1511.928659][T32436] do_mount+0x135a/0x1b50 [ 1511.933101][T32436] ? copy_mount_string+0x40/0x40 [ 1511.938060][T32436] ? _copy_from_user+0x12c/0x1a0 [ 1511.939863][T32548] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1511.943014][T32436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1511.943043][T32436] __x64_sys_mount+0x192/0x230 [ 1511.943070][T32436] do_syscall_64+0xfa/0x790 [ 1511.972685][T32436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1511.978694][T32436] RIP: 0033:0x45c6c9 10:11:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1511.982607][T32436] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1512.002327][T32436] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1512.010750][T32436] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1512.018736][T32436] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1512.026826][T32436] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 10:11:51 executing program 5 (fault-call:4 fault-nth:23): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1512.034815][T32436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1512.042934][T32436] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000016 [ 1512.060196][T32446] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:51 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x1000000) 10:11:51 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7000000) [ 1512.252623][T32609] FAULT_INJECTION: forcing a failure. [ 1512.252623][T32609] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.301391][T32609] CPU: 1 PID: 32609 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1512.311944][T32609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.322013][T32609] Call Trace: [ 1512.325349][T32609] dump_stack+0x197/0x210 [ 1512.329714][T32609] should_fail.cold+0x5/0xf [ 1512.334242][T32609] ? setup_fault_attr+0x1f0/0x1f0 [ 1512.340679][T32609] ? ___might_sleep+0x163/0x2c0 [ 1512.345557][T32609] __should_failslab+0xb7/0x100 [ 1512.350465][T32609] should_failslab+0x9/0x14 [ 1512.354989][T32609] kmem_cache_alloc_trace+0x2d3/0x790 [ 1512.358483][T32658] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1512.360491][T32609] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1512.360525][T32609] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1512.360561][T32609] __list_lru_init+0x3fe/0x710 [ 1512.390896][T32609] alloc_super+0x7cc/0x910 [ 1512.395343][T32609] sget+0x117/0x560 [ 1512.399168][T32609] ? get_anon_bdev+0xc0/0xc0 [ 1512.403815][T32609] ? ovl_show_options+0x5f0/0x5f0 [ 1512.408854][T32609] mount_nodev+0x31/0x110 [ 1512.413203][T32609] ovl_mount+0x2d/0x40 [ 1512.417285][T32609] ? ovl_own_xattr_set+0x10/0x10 [ 1512.422242][T32609] legacy_get_tree+0x108/0x220 [ 1512.427031][T32609] vfs_get_tree+0x8e/0x300 [ 1512.431479][T32609] do_mount+0x135a/0x1b50 [ 1512.435838][T32609] ? copy_mount_string+0x40/0x40 [ 1512.440811][T32609] ? _copy_from_user+0x12c/0x1a0 [ 1512.445857][T32609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1512.452126][T32609] __x64_sys_mount+0x192/0x230 [ 1512.456920][T32609] do_syscall_64+0xfa/0x790 [ 1512.461567][T32609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1512.467467][T32609] RIP: 0033:0x45c6c9 [ 1512.471378][T32609] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1512.488585][T32660] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:11:51 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x2000000) 10:11:51 executing program 5 (fault-call:4 fault-nth:24): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1512.491089][T32609] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1512.491106][T32609] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1512.491115][T32609] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1512.491125][T32609] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1512.491134][T32609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1512.491143][T32609] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000017 [ 1512.645076][T32660] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1512.731925][T32664] FAULT_INJECTION: forcing a failure. [ 1512.731925][T32664] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.772399][T32668] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1512.794191][T32664] CPU: 0 PID: 32664 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1512.804119][T32664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.814317][T32664] Call Trace: [ 1512.817614][T32664] dump_stack+0x197/0x210 [ 1512.821947][T32664] should_fail.cold+0x5/0xf [ 1512.826447][T32664] ? setup_fault_attr+0x1f0/0x1f0 [ 1512.831474][T32664] ? ___might_sleep+0x163/0x2c0 [ 1512.836519][T32664] __should_failslab+0xb7/0x100 [ 1512.841394][T32664] should_failslab+0x9/0x14 [ 1512.845914][T32664] kmem_cache_alloc_trace+0x2d3/0x790 [ 1512.851299][T32664] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1512.857137][T32664] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1512.862798][T32664] __list_lru_init+0x3fe/0x710 [ 1512.867564][T32664] alloc_super+0x7cc/0x910 [ 1512.871971][T32664] sget+0x117/0x560 [ 1512.875819][T32664] ? get_anon_bdev+0xc0/0xc0 [ 1512.880435][T32664] ? ovl_show_options+0x5f0/0x5f0 [ 1512.885454][T32664] mount_nodev+0x31/0x110 [ 1512.889777][T32664] ovl_mount+0x2d/0x40 [ 1512.893873][T32664] ? ovl_own_xattr_set+0x10/0x10 [ 1512.898807][T32664] legacy_get_tree+0x108/0x220 [ 1512.903625][T32664] vfs_get_tree+0x8e/0x300 [ 1512.908045][T32664] do_mount+0x135a/0x1b50 [ 1512.912376][T32664] ? copy_mount_string+0x40/0x40 [ 1512.917310][T32664] ? _copy_from_user+0x12c/0x1a0 [ 1512.922251][T32664] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1512.928488][T32664] __x64_sys_mount+0x192/0x230 [ 1512.933268][T32664] do_syscall_64+0xfa/0x790 [ 1512.937772][T32664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1512.943772][T32664] RIP: 0033:0x45c6c9 [ 1512.948012][T32664] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1512.967607][T32664] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1512.976010][T32664] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1512.983973][T32664] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1512.992060][T32664] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1513.000140][T32664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1513.008105][T32664] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000018 10:11:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x4]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:52 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8000000) 10:11:52 executing program 5 (fault-call:4 fault-nth:25): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:52 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3000000) 10:11:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x10]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) [ 1513.600246][T32681] xt_TCPMSS: Only works on TCP SYN packets [ 1513.607528][T32672] FAULT_INJECTION: forcing a failure. [ 1513.607528][T32672] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.624453][T32679] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1513.652159][T32672] CPU: 0 PID: 32672 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1513.660912][T32714] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1513.662098][T32672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1513.662104][T32672] Call Trace: [ 1513.662131][T32672] dump_stack+0x197/0x210 [ 1513.662158][T32672] should_fail.cold+0x5/0xf [ 1513.698459][T32672] ? setup_fault_attr+0x1f0/0x1f0 [ 1513.703511][T32672] ? ___might_sleep+0x163/0x2c0 [ 1513.705250][T32679] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1513.708397][T32672] __should_failslab+0xb7/0x100 [ 1513.708418][T32672] should_failslab+0x9/0x14 [ 1513.708434][T32672] kmem_cache_alloc_trace+0x2d3/0x790 [ 1513.708455][T32672] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1513.708484][T32672] __memcg_init_list_lru_node+0x8a/0x1e0 10:11:53 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4000000) [ 1513.708510][T32672] __list_lru_init+0x3fe/0x710 [ 1513.708536][T32672] alloc_super+0x7cc/0x910 [ 1513.708562][T32672] sget+0x117/0x560 [ 1513.762030][T32672] ? get_anon_bdev+0xc0/0xc0 [ 1513.766754][T32672] ? ovl_show_options+0x5f0/0x5f0 [ 1513.771800][T32672] mount_nodev+0x31/0x110 [ 1513.776157][T32672] ovl_mount+0x2d/0x40 [ 1513.780288][T32672] ? ovl_own_xattr_set+0x10/0x10 [ 1513.785261][T32672] legacy_get_tree+0x108/0x220 [ 1513.790052][T32672] vfs_get_tree+0x8e/0x300 [ 1513.794489][T32672] do_mount+0x135a/0x1b50 10:11:53 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8040000) [ 1513.798853][T32672] ? copy_mount_string+0x40/0x40 [ 1513.803820][T32672] ? _copy_from_user+0x12c/0x1a0 [ 1513.808778][T32672] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1513.815044][T32672] __x64_sys_mount+0x192/0x230 [ 1513.819914][T32672] do_syscall_64+0xfa/0x790 [ 1513.824455][T32672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1513.830377][T32672] RIP: 0033:0x45c6c9 [ 1513.834384][T32672] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1513.854005][T32672] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1513.862438][T32672] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1513.870422][T32672] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1513.878409][T32672] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1513.886513][T32672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1513.894496][T32672] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000019 10:11:53 executing program 5 (fault-call:4 fault-nth:26): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1514.063261][ T324] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:53 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x5000000) 10:11:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1514.250031][ T415] FAULT_INJECTION: forcing a failure. [ 1514.250031][ T415] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.298188][ T430] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1514.315640][ T415] CPU: 1 PID: 415 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1514.325499][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.335558][ T415] Call Trace: [ 1514.338871][ T415] dump_stack+0x197/0x210 [ 1514.343234][ T415] should_fail.cold+0x5/0xf [ 1514.347762][ T415] ? setup_fault_attr+0x1f0/0x1f0 [ 1514.352851][ T415] ? ___might_sleep+0x163/0x2c0 [ 1514.357733][ T415] __should_failslab+0xb7/0x100 [ 1514.362606][ T415] should_failslab+0x9/0x14 [ 1514.367125][ T415] kmem_cache_alloc_node_trace+0x274/0x750 [ 1514.372947][ T415] ? kmem_cache_alloc_trace+0x397/0x790 [ 1514.378507][ T415] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1514.382531][ T435] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1514.384335][ T415] __kmalloc_node+0x3d/0x70 [ 1514.384358][ T415] kvmalloc_node+0x68/0x100 [ 1514.384381][ T415] __list_lru_init+0x4d5/0x710 [ 1514.384415][ T415] alloc_super+0x7cc/0x910 [ 1514.416742][ T415] sget+0x117/0x560 [ 1514.420575][ T415] ? get_anon_bdev+0xc0/0xc0 [ 1514.428063][ T415] ? ovl_show_options+0x5f0/0x5f0 [ 1514.433108][ T415] mount_nodev+0x31/0x110 [ 1514.437457][ T415] ovl_mount+0x2d/0x40 [ 1514.441537][ T415] ? ovl_own_xattr_set+0x10/0x10 [ 1514.446493][ T415] legacy_get_tree+0x108/0x220 [ 1514.451293][ T415] vfs_get_tree+0x8e/0x300 [ 1514.455730][ T415] do_mount+0x135a/0x1b50 [ 1514.460084][ T415] ? copy_mount_string+0x40/0x40 [ 1514.465051][ T415] ? _copy_from_user+0x12c/0x1a0 [ 1514.470025][ T415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1514.476287][ T415] __x64_sys_mount+0x192/0x230 [ 1514.481085][ T415] do_syscall_64+0xfa/0x790 [ 1514.485611][ T415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1514.491506][ T415] RIP: 0033:0x45c6c9 [ 1514.495408][ T415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1514.515023][ T415] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1514.523460][ T415] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1514.531449][ T415] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1514.539439][ T415] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1514.547426][ T415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1514.555412][ T415] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000001a [ 1514.607027][ T430] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x5]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:54 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6000000) 10:11:54 executing program 5 (fault-call:4 fault-nth:27): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:54 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa) close(r3) r4 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 10:11:54 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc000000) [ 1515.101222][ T542] xt_TCPMSS: Only works on TCP SYN packets [ 1515.145674][ T550] FAULT_INJECTION: forcing a failure. [ 1515.145674][ T550] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.156093][ T547] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1515.176662][ T550] CPU: 0 PID: 550 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1515.186404][ T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.196467][ T550] Call Trace: [ 1515.199782][ T550] dump_stack+0x197/0x210 [ 1515.203372][ T600] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1515.204133][ T550] should_fail.cold+0x5/0xf [ 1515.222778][ T550] ? setup_fault_attr+0x1f0/0x1f0 [ 1515.227832][ T550] ? ___might_sleep+0x163/0x2c0 [ 1515.232715][ T550] __should_failslab+0xb7/0x100 [ 1515.237584][ T550] should_failslab+0x9/0x14 [ 1515.242104][ T550] kmem_cache_alloc_trace+0x2d3/0x790 [ 1515.247494][ T550] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1515.253334][ T550] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1515.258996][ T550] __list_lru_init+0x3fe/0x710 [ 1515.263780][ T550] alloc_super+0x7cc/0x910 [ 1515.268223][ T550] sget+0x117/0x560 [ 1515.272047][ T550] ? get_anon_bdev+0xc0/0xc0 [ 1515.276658][ T550] ? ovl_show_options+0x5f0/0x5f0 [ 1515.281702][ T550] mount_nodev+0x31/0x110 [ 1515.286052][ T550] ovl_mount+0x2d/0x40 [ 1515.290138][ T550] ? ovl_own_xattr_set+0x10/0x10 [ 1515.295084][ T550] legacy_get_tree+0x108/0x220 [ 1515.299865][ T550] vfs_get_tree+0x8e/0x300 [ 1515.304296][ T550] do_mount+0x135a/0x1b50 [ 1515.308652][ T550] ? copy_mount_string+0x40/0x40 [ 1515.313618][ T550] ? _copy_from_user+0x12c/0x1a0 [ 1515.318572][ T550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1515.324843][ T550] __x64_sys_mount+0x192/0x230 [ 1515.329825][ T550] do_syscall_64+0xfa/0x790 [ 1515.334352][ T550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1515.340261][ T550] RIP: 0033:0x45c6c9 [ 1515.344164][ T550] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1515.363782][ T550] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1515.372206][ T550] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1515.380201][ T550] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1515.388192][ T550] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 10:11:54 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7000000) 10:11:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:54 executing program 2: r0 = socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x80003, 0x6b) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) ioctl(r1, 0xf81f, &(0x7f0000000140)="080db5055e0bcfe847907149c4035eca5e16b4afcfdee9223247a6c9724218f69a0f14961d0b44b77384bd72607cd520f14a555fd5c544dc2c1ab4b52a8e5aa74961c8648915e6a134079c89bac754dc9d8c1ab9815b043a8bd1b27a3fc26977917b58569525048e590ec65011853b66") r2 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x5, r2, 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000280), 0x4) keyctl$get_security(0x6, r2, 0x0, 0x0) r3 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="b28193b5d09b342725ea672bcf11c2ccbb294d307e636f05ed3ce8dcb4b758e3beb1f55afb6676d4ec5c2c07d5ece256b8bf74646740af7c1d088ecfbaef75b36a47aac41e37fed510bea76fc4d5dae42e720c715b85e8b33c7ec725dc6c5109c4bc7f2f3b67f1a14f7b15d69055e48f0c13a8b073627f16534bbdda94aab71ef983b1f6b63fe46e01", 0x89, r2) keyctl$get_keyring_id(0x0, r3, 0x100) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8579}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}}}]}]}, 0x58}}, 0x0) [ 1515.396257][ T550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1515.404236][ T550] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000001b [ 1515.422818][ T547] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:54 executing program 5 (fault-call:4 fault-nth:28): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:55 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x12000000) [ 1515.613884][ T769] FAULT_INJECTION: forcing a failure. [ 1515.613884][ T769] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.655956][ T770] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1515.675982][ T769] CPU: 1 PID: 769 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1515.685731][ T769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.695793][ T769] Call Trace: [ 1515.699107][ T769] dump_stack+0x197/0x210 [ 1515.703463][ T769] should_fail.cold+0x5/0xf [ 1515.706692][ T772] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1515.708113][ T769] ? setup_fault_attr+0x1f0/0x1f0 [ 1515.708142][ T769] ? ___might_sleep+0x163/0x2c0 [ 1515.708167][ T769] __should_failslab+0xb7/0x100 [ 1515.708189][ T769] should_failslab+0x9/0x14 [ 1515.730585][ T772] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1515.733646][ T769] kmem_cache_alloc_trace+0x2d3/0x790 [ 1515.733670][ T769] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1515.733701][ T769] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1515.733727][ T769] __list_lru_init+0x3fe/0x710 [ 1515.774039][ T769] alloc_super+0x7cc/0x910 [ 1515.778493][ T769] sget+0x117/0x560 [ 1515.782318][ T769] ? get_anon_bdev+0xc0/0xc0 [ 1515.786932][ T769] ? ovl_show_options+0x5f0/0x5f0 [ 1515.791977][ T769] mount_nodev+0x31/0x110 [ 1515.796330][ T769] ovl_mount+0x2d/0x40 [ 1515.800460][ T769] ? ovl_own_xattr_set+0x10/0x10 [ 1515.805410][ T769] legacy_get_tree+0x108/0x220 [ 1515.810218][ T769] vfs_get_tree+0x8e/0x300 [ 1515.814654][ T769] do_mount+0x135a/0x1b50 [ 1515.819008][ T769] ? copy_mount_string+0x40/0x40 [ 1515.823982][ T769] ? _copy_from_user+0x12c/0x1a0 [ 1515.829050][ T769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1515.835322][ T769] __x64_sys_mount+0x192/0x230 [ 1515.840109][ T769] do_syscall_64+0xfa/0x790 [ 1515.844642][ T769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1515.850543][ T769] RIP: 0033:0x45c6c9 10:11:55 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3f000000) [ 1515.854447][ T769] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1515.874166][ T769] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1515.882580][ T769] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1515.890593][ T769] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1515.898675][ T769] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1515.906660][ T769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1515.914764][ T769] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000001c [ 1516.041213][ T777] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1516.078170][ T777] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x6]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:55 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8000000) 10:11:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setrlimit(0x680c99d31c0f9e90, &(0x7f0000000180)={0x0, 0x7}) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000e001000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000010000800000000000020000000000000000000000000000000000ffffffe900"/192]) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0x9, 0x1, 0x8001, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 10:11:55 executing program 5 (fault-call:4 fault-nth:29): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:55 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x48000000) [ 1516.415207][ T785] xt_TCPMSS: Only works on TCP SYN packets [ 1516.497814][ T795] FAULT_INJECTION: forcing a failure. [ 1516.497814][ T795] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.533513][ T793] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1516.538798][ T842] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1516.578547][ T795] CPU: 1 PID: 795 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1516.588410][ T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:11:56 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8040000) [ 1516.598482][ T795] Call Trace: [ 1516.601797][ T795] dump_stack+0x197/0x210 [ 1516.606164][ T795] should_fail.cold+0x5/0xf [ 1516.610806][ T795] ? setup_fault_attr+0x1f0/0x1f0 [ 1516.615856][ T795] ? ___might_sleep+0x163/0x2c0 [ 1516.620735][ T795] __should_failslab+0xb7/0x100 [ 1516.625608][ T795] should_failslab+0x9/0x14 [ 1516.630138][ T795] kmem_cache_alloc_node_trace+0x274/0x750 [ 1516.635969][ T795] ? kmem_cache_alloc_trace+0x397/0x790 [ 1516.641524][ T795] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1516.647485][ T795] __kmalloc_node+0x3d/0x70 [ 1516.652095][ T795] kvmalloc_node+0x68/0x100 [ 1516.656620][ T795] __list_lru_init+0x4d5/0x710 [ 1516.661397][ T795] alloc_super+0x7cc/0x910 [ 1516.665812][ T795] sget+0x117/0x560 [ 1516.669623][ T795] ? get_anon_bdev+0xc0/0xc0 [ 1516.674231][ T795] ? ovl_show_options+0x5f0/0x5f0 [ 1516.675051][ T793] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1516.679278][ T795] mount_nodev+0x31/0x110 10:11:56 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4c000000) [ 1516.679303][ T795] ovl_mount+0x2d/0x40 [ 1516.679320][ T795] ? ovl_own_xattr_set+0x10/0x10 [ 1516.679374][ T795] legacy_get_tree+0x108/0x220 [ 1516.679399][ T795] vfs_get_tree+0x8e/0x300 [ 1516.679419][ T795] do_mount+0x135a/0x1b50 [ 1516.679444][ T795] ? copy_mount_string+0x40/0x40 [ 1516.679470][ T795] ? _copy_from_user+0x12c/0x1a0 [ 1516.730390][ T795] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1516.736670][ T795] __x64_sys_mount+0x192/0x230 [ 1516.741450][ T795] do_syscall_64+0xfa/0x790 [ 1516.746282][ T795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1516.752167][ T795] RIP: 0033:0x45c6c9 [ 1516.756130][ T795] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1516.775748][ T795] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1516.784163][ T795] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 10:11:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1516.792141][ T795] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1516.800343][ T795] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1516.808409][ T795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1516.816437][ T795] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000001d 10:11:56 executing program 5 (fault-call:4 fault-nth:30): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1516.980899][ T909] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1517.023019][ T909] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:56 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4e260000) [ 1517.185338][ T917] FAULT_INJECTION: forcing a failure. [ 1517.185338][ T917] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.226130][ T986] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1517.269225][ T917] CPU: 0 PID: 917 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1517.278979][ T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1517.289145][ T917] Call Trace: [ 1517.292475][ T917] dump_stack+0x197/0x210 [ 1517.296847][ T917] should_fail.cold+0x5/0xf [ 1517.301494][ T917] ? setup_fault_attr+0x1f0/0x1f0 [ 1517.306543][ T917] ? ___might_sleep+0x163/0x2c0 [ 1517.311422][ T917] __should_failslab+0xb7/0x100 [ 1517.316297][ T917] should_failslab+0x9/0x14 [ 1517.320834][ T917] kmem_cache_alloc_trace+0x2d3/0x790 [ 1517.322055][ T1028] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1517.326355][ T917] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1517.326391][ T917] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1517.326419][ T917] __list_lru_init+0x3fe/0x710 [ 1517.326446][ T917] alloc_super+0x7cc/0x910 [ 1517.357810][ T917] sget+0x117/0x560 [ 1517.361631][ T917] ? get_anon_bdev+0xc0/0xc0 [ 1517.366240][ T917] ? ovl_show_options+0x5f0/0x5f0 [ 1517.371280][ T917] mount_nodev+0x31/0x110 [ 1517.375635][ T917] ovl_mount+0x2d/0x40 [ 1517.379726][ T917] ? ovl_own_xattr_set+0x10/0x10 [ 1517.384678][ T917] legacy_get_tree+0x108/0x220 [ 1517.389464][ T917] vfs_get_tree+0x8e/0x300 [ 1517.393894][ T917] do_mount+0x135a/0x1b50 [ 1517.398247][ T917] ? copy_mount_string+0x40/0x40 [ 1517.403213][ T917] ? _copy_from_user+0x12c/0x1a0 [ 1517.408173][ T917] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1517.414442][ T917] __x64_sys_mount+0x192/0x230 10:11:56 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc000000) [ 1517.419231][ T917] do_syscall_64+0xfa/0x790 [ 1517.423756][ T917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1517.429655][ T917] RIP: 0033:0x45c6c9 [ 1517.433564][ T917] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1517.453187][ T917] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1517.461613][ T917] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1517.469580][ T917] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1517.477543][ T917] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1517.485553][ T917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1517.493563][ T917] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000001e [ 1517.669473][ T1034] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x7]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:57 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x68000000) 10:11:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x8, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x13800) close(r2) 10:11:57 executing program 5 (fault-call:4 fault-nth:31): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x12000000) [ 1518.125392][ T1045] xt_TCPMSS: Only works on TCP SYN packets [ 1518.142754][ T1046] FAULT_INJECTION: forcing a failure. [ 1518.142754][ T1046] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.180006][ T1047] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1518.191687][ T1046] CPU: 0 PID: 1046 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1518.201515][ T1046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.211580][ T1046] Call Trace: [ 1518.214893][ T1046] dump_stack+0x197/0x210 10:11:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x30000000) [ 1518.218054][ T1071] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1518.219247][ T1046] should_fail.cold+0x5/0xf [ 1518.219276][ T1046] ? setup_fault_attr+0x1f0/0x1f0 [ 1518.242933][ T1046] ? ___might_sleep+0x163/0x2c0 [ 1518.247812][ T1046] __should_failslab+0xb7/0x100 [ 1518.252675][ T1046] should_failslab+0x9/0x14 [ 1518.257195][ T1046] kmem_cache_alloc_trace+0x2d3/0x790 [ 1518.262580][ T1046] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1518.268438][ T1046] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1518.274069][ T1046] __list_lru_init+0x3fe/0x710 [ 1518.278828][ T1046] alloc_super+0x7cc/0x910 [ 1518.283233][ T1046] sget+0x117/0x560 [ 1518.287071][ T1046] ? get_anon_bdev+0xc0/0xc0 [ 1518.291728][ T1046] ? ovl_show_options+0x5f0/0x5f0 [ 1518.296762][ T1046] mount_nodev+0x31/0x110 [ 1518.301089][ T1046] ovl_mount+0x2d/0x40 [ 1518.305153][ T1046] ? ovl_own_xattr_set+0x10/0x10 [ 1518.310202][ T1046] legacy_get_tree+0x108/0x220 [ 1518.315009][ T1046] vfs_get_tree+0x8e/0x300 [ 1518.319425][ T1046] do_mount+0x135a/0x1b50 [ 1518.323755][ T1046] ? copy_mount_string+0x40/0x40 [ 1518.328694][ T1046] ? _copy_from_user+0x12c/0x1a0 [ 1518.333630][ T1046] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1518.339868][ T1046] __x64_sys_mount+0x192/0x230 [ 1518.344630][ T1046] do_syscall_64+0xfa/0x790 [ 1518.349134][ T1046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1518.355029][ T1046] RIP: 0033:0x45c6c9 [ 1518.358923][ T1046] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1518.378592][ T1046] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1518.386999][ T1046] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1518.394963][ T1046] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1518.402927][ T1046] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1518.410888][ T1046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1518.418856][ T1046] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000001f 10:11:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000000087) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x40}, 0x1c) io_setup(0x101, &(0x7f00000000c0)=0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) io_submit(r2, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001ec0)="5ba81c8b", 0x4}]) 10:11:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1518.500681][ T1047] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:11:57 executing program 5 (fault-call:4 fault-nth:32): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:58 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6c000000) 10:11:58 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x801, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x212}, {r0, 0x200}, {r2, 0x8000}], 0x3, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={[0x100000001]}, 0x8) [ 1518.733756][ T1196] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1518.738690][ T1188] FAULT_INJECTION: forcing a failure. [ 1518.738690][ T1188] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.804660][ T1188] CPU: 1 PID: 1188 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1518.814504][ T1188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.824761][ T1188] Call Trace: [ 1518.828074][ T1188] dump_stack+0x197/0x210 [ 1518.832571][ T1188] should_fail.cold+0x5/0xf [ 1518.837106][ T1188] ? setup_fault_attr+0x1f0/0x1f0 [ 1518.839613][ T1275] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1518.842163][ T1188] ? ___might_sleep+0x163/0x2c0 [ 1518.842189][ T1188] __should_failslab+0xb7/0x100 [ 1518.842209][ T1188] should_failslab+0x9/0x14 [ 1518.857793][ T1312] md: invalid raid superblock magic on ram0 [ 1518.862751][ T1188] kmem_cache_alloc_trace+0x2d3/0x790 [ 1518.862776][ T1188] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1518.862808][ T1188] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1518.862832][ T1188] __list_lru_init+0x3fe/0x710 [ 1518.862860][ T1188] alloc_super+0x7cc/0x910 [ 1518.862889][ T1188] sget+0x117/0x560 [ 1518.870245][ T1312] md: ram0 does not have a valid v0.0 superblock, not importing! [ 1518.873543][ T1188] ? get_anon_bdev+0xc0/0xc0 [ 1518.873570][ T1188] ? ovl_show_options+0x5f0/0x5f0 [ 1518.873587][ T1188] mount_nodev+0x31/0x110 [ 1518.873608][ T1188] ovl_mount+0x2d/0x40 [ 1518.888349][ T1312] md: md_import_device returned -22 [ 1518.890406][ T1188] ? ovl_own_xattr_set+0x10/0x10 [ 1518.890427][ T1188] legacy_get_tree+0x108/0x220 [ 1518.890450][ T1188] vfs_get_tree+0x8e/0x300 [ 1518.890471][ T1188] do_mount+0x135a/0x1b50 [ 1518.897324][ T1275] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1518.899660][ T1188] ? copy_mount_string+0x40/0x40 [ 1518.899689][ T1188] ? _copy_from_user+0x12c/0x1a0 [ 1518.899721][ T1188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1518.937656][ T1312] md: invalid raid superblock magic on ram0 [ 1518.939416][ T1188] __x64_sys_mount+0x192/0x230 [ 1518.939442][ T1188] do_syscall_64+0xfa/0x790 [ 1518.946351][ T1312] md: ram0 does not have a valid v0.0 superblock, not importing! [ 1518.948620][ T1188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1518.948632][ T1188] RIP: 0033:0x45c6c9 [ 1518.948647][ T1188] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1518.948656][ T1188] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1518.948670][ T1188] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1518.948678][ T1188] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1518.948687][ T1188] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1518.948695][ T1188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1518.948704][ T1188] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000020 [ 1519.089011][ T1312] md: md_import_device returned -22 10:11:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x8]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:11:59 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3f000000) 10:11:59 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x74000000) 10:11:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) 10:11:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:11:59 executing program 5 (fault-call:4 fault-nth:33): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1519.772402][ T1325] xt_TCPMSS: Only works on TCP SYN packets [ 1519.783875][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1519.840178][ T1334] FAULT_INJECTION: forcing a failure. [ 1519.840178][ T1334] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.862290][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1519.864574][ T1332] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1519.904618][ T1334] CPU: 0 PID: 1334 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1519.914681][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.918788][ T1440] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1519.924746][ T1334] Call Trace: [ 1519.924778][ T1334] dump_stack+0x197/0x210 [ 1519.924808][ T1334] should_fail.cold+0x5/0xf 10:11:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1519.924833][ T1334] ? setup_fault_attr+0x1f0/0x1f0 [ 1519.956237][ T1334] ? ___might_sleep+0x163/0x2c0 [ 1519.961115][ T1334] __should_failslab+0xb7/0x100 [ 1519.965988][ T1334] should_failslab+0x9/0x14 [ 1519.970508][ T1334] kmem_cache_alloc_trace+0x2d3/0x790 [ 1519.975899][ T1334] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1519.981739][ T1334] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1519.987396][ T1334] __list_lru_init+0x3fe/0x710 [ 1519.992190][ T1334] alloc_super+0x7cc/0x910 [ 1519.996648][ T1334] sget+0x117/0x560 [ 1520.000472][ T1334] ? get_anon_bdev+0xc0/0xc0 10:11:59 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8cffffff) [ 1520.005084][ T1334] ? ovl_show_options+0x5f0/0x5f0 [ 1520.010120][ T1334] mount_nodev+0x31/0x110 [ 1520.014464][ T1334] ovl_mount+0x2d/0x40 [ 1520.018543][ T1334] ? ovl_own_xattr_set+0x10/0x10 [ 1520.023485][ T1334] legacy_get_tree+0x108/0x220 [ 1520.028261][ T1334] vfs_get_tree+0x8e/0x300 [ 1520.032685][ T1334] do_mount+0x135a/0x1b50 [ 1520.037035][ T1334] ? copy_mount_string+0x40/0x40 [ 1520.041973][ T1334] ? _copy_from_user+0x12c/0x1a0 [ 1520.046926][ T1334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1520.053193][ T1334] __x64_sys_mount+0x192/0x230 [ 1520.057989][ T1334] do_syscall_64+0xfa/0x790 [ 1520.062519][ T1334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1520.068424][ T1334] RIP: 0033:0x45c6c9 [ 1520.072333][ T1334] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1520.091951][ T1334] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1520.100378][ T1334] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1520.108360][ T1334] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1520.112998][ T1332] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1520.116335][ T1334] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1520.116345][ T1334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:11:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}}) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) getsockname$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 1520.116355][ T1334] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000021 10:11:59 executing program 5 (fault-call:4 fault-nth:34): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:11:59 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7a000000) [ 1520.378810][ T1561] FAULT_INJECTION: forcing a failure. [ 1520.378810][ T1561] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.427114][ T1561] CPU: 1 PID: 1561 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1520.436943][ T1561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.447013][ T1561] Call Trace: [ 1520.450333][ T1561] dump_stack+0x197/0x210 [ 1520.454718][ T1561] should_fail.cold+0x5/0xf [ 1520.459263][ T1561] ? setup_fault_attr+0x1f0/0x1f0 [ 1520.464311][ T1561] ? ___might_sleep+0x163/0x2c0 [ 1520.469195][ T1561] __should_failslab+0xb7/0x100 [ 1520.474062][ T1561] should_failslab+0x9/0x14 [ 1520.478587][ T1561] kmem_cache_alloc_trace+0x2d3/0x790 [ 1520.479297][ T1568] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1520.483982][ T1561] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1520.484019][ T1561] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1520.484045][ T1561] __list_lru_init+0x3fe/0x710 [ 1520.511048][ T1561] alloc_super+0x7cc/0x910 [ 1520.515499][ T1561] sget+0x117/0x560 [ 1520.519328][ T1561] ? get_anon_bdev+0xc0/0xc0 [ 1520.523939][ T1561] ? ovl_show_options+0x5f0/0x5f0 [ 1520.528986][ T1561] mount_nodev+0x31/0x110 [ 1520.533437][ T1561] ovl_mount+0x2d/0x40 [ 1520.536175][ T1568] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1520.537517][ T1561] ? ovl_own_xattr_set+0x10/0x10 [ 1520.537618][ T1561] legacy_get_tree+0x108/0x220 [ 1520.537645][ T1561] vfs_get_tree+0x8e/0x300 [ 1520.565899][ T1561] do_mount+0x135a/0x1b50 [ 1520.570270][ T1561] ? copy_mount_string+0x40/0x40 [ 1520.575335][ T1561] ? _copy_from_user+0x12c/0x1a0 [ 1520.580300][ T1561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1520.586578][ T1561] __x64_sys_mount+0x192/0x230 [ 1520.591372][ T1561] do_syscall_64+0xfa/0x790 [ 1520.595912][ T1561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1520.601815][ T1561] RIP: 0033:0x45c6c9 [ 1520.605825][ T1561] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:12:00 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8cffffff) [ 1520.625538][ T1561] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1520.633966][ T1561] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1520.641955][ T1561] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1520.649943][ T1561] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1520.657964][ T1561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1520.665980][ T1561] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000022 [ 1520.676055][ T1570] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1520.847381][ T1573] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1520.903548][ T1573] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x10]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:00 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xa000a000) 10:12:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}}) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) getsockname$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:12:00 executing program 5 (fault-call:4 fault-nth:35): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:00 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xa000a000) [ 1521.374488][ T1583] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1521.393271][ T1589] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1521.413184][ T1586] xt_TCPMSS: Only works on TCP SYN packets [ 1521.429541][ T1588] FAULT_INJECTION: forcing a failure. [ 1521.429541][ T1588] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.443164][ T1583] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1521.461502][ T1588] CPU: 0 PID: 1588 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1521.471332][ T1588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.481395][ T1588] Call Trace: [ 1521.484716][ T1588] dump_stack+0x197/0x210 [ 1521.489076][ T1588] should_fail.cold+0x5/0xf [ 1521.493606][ T1588] ? setup_fault_attr+0x1f0/0x1f0 [ 1521.498659][ T1588] ? ___might_sleep+0x163/0x2c0 [ 1521.503533][ T1588] __should_failslab+0xb7/0x100 [ 1521.508415][ T1588] should_failslab+0x9/0x14 [ 1521.512940][ T1588] kmem_cache_alloc_trace+0x2d3/0x790 [ 1521.518332][ T1588] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1521.524179][ T1588] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1521.529845][ T1588] __list_lru_init+0x3fe/0x710 [ 1521.534624][ T1588] alloc_super+0x7cc/0x910 [ 1521.539057][ T1588] sget+0x117/0x560 [ 1521.542976][ T1588] ? get_anon_bdev+0xc0/0xc0 [ 1521.547583][ T1588] ? ovl_show_options+0x5f0/0x5f0 [ 1521.552673][ T1588] mount_nodev+0x31/0x110 [ 1521.557036][ T1588] ovl_mount+0x2d/0x40 [ 1521.561113][ T1588] ? ovl_own_xattr_set+0x10/0x10 [ 1521.566064][ T1588] legacy_get_tree+0x108/0x220 [ 1521.570852][ T1588] vfs_get_tree+0x8e/0x300 [ 1521.575305][ T1588] do_mount+0x135a/0x1b50 [ 1521.579666][ T1588] ? copy_mount_string+0x40/0x40 [ 1521.584633][ T1588] ? _copy_from_user+0x12c/0x1a0 [ 1521.589599][ T1588] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1521.595850][ T1588] __x64_sys_mount+0x192/0x230 [ 1521.600632][ T1588] do_syscall_64+0xfa/0x790 [ 1521.605152][ T1588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1521.611246][ T1588] RIP: 0033:0x45c6c9 [ 1521.615142][ T1588] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1521.634856][ T1588] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1521.643392][ T1588] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1521.651490][ T1588] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1521.659480][ T1588] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1521.667463][ T1588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1521.675446][ T1588] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000023 10:12:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xf6ffffff) 10:12:01 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xa000a000) 10:12:01 executing program 5 (fault-call:4 fault-nth:36): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:01 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xf6ffffff) [ 1521.949257][ T1707] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1521.999248][ T1708] FAULT_INJECTION: forcing a failure. [ 1521.999248][ T1708] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.008632][ T1710] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfeffffff) 10:12:01 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfeffffff) [ 1522.040339][ T1708] CPU: 1 PID: 1708 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1522.050309][ T1708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.060611][ T1708] Call Trace: [ 1522.064042][ T1708] dump_stack+0x197/0x210 [ 1522.068409][ T1708] should_fail.cold+0x5/0xf [ 1522.072959][ T1708] ? setup_fault_attr+0x1f0/0x1f0 [ 1522.078010][ T1708] ? ___might_sleep+0x163/0x2c0 [ 1522.082887][ T1708] __should_failslab+0xb7/0x100 [ 1522.087753][ T1708] should_failslab+0x9/0x14 [ 1522.092269][ T1708] __kmalloc+0x2e0/0x770 [ 1522.096528][ T1708] ? _find_next_bit.constprop.0+0x17a/0x200 [ 1522.102629][ T1708] ? __list_lru_init+0xd1/0x710 [ 1522.107506][ T1708] __list_lru_init+0xd1/0x710 [ 1522.112215][ T1708] alloc_super+0x7f7/0x910 [ 1522.116659][ T1708] sget+0x117/0x560 [ 1522.120479][ T1708] ? get_anon_bdev+0xc0/0xc0 [ 1522.125099][ T1708] ? ovl_show_options+0x5f0/0x5f0 [ 1522.130138][ T1708] mount_nodev+0x31/0x110 [ 1522.134529][ T1708] ovl_mount+0x2d/0x40 [ 1522.138605][ T1708] ? ovl_own_xattr_set+0x10/0x10 [ 1522.143536][ T1708] legacy_get_tree+0x108/0x220 [ 1522.148312][ T1708] vfs_get_tree+0x8e/0x300 [ 1522.152839][ T1708] do_mount+0x135a/0x1b50 [ 1522.157185][ T1708] ? copy_mount_string+0x40/0x40 [ 1522.162126][ T1708] ? _copy_from_user+0x12c/0x1a0 [ 1522.167064][ T1708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1522.173304][ T1708] __x64_sys_mount+0x192/0x230 [ 1522.178069][ T1708] do_syscall_64+0xfa/0x790 [ 1522.182572][ T1708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1522.188449][ T1708] RIP: 0033:0x45c6c9 [ 1522.192334][ T1708] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1522.211938][ T1708] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1522.220343][ T1708] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1522.228377][ T1708] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1522.236347][ T1708] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1522.244309][ T1708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1522.252272][ T1708] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000024 [ 1522.373542][ T1714] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1522.452689][ T1718] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1522.486315][ T1714] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x11]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = gettid() sched_getparam(r3, &(0x7f0000000100)) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r6 = fcntl$dupfd(r5, 0x0, r2) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f00000002c0)='./bus\x00', r6) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r8}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000240)={0x4, 0x4000}) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB, @ANYRESOCT=r1, @ANYRESHEX=r3, @ANYBLOB="6fec30335bd56487cc0fac07a540aee82dbacebe5d304a0adfc4fee63650871b5125ed97ec2c6c97d0c41f980b648eaaf8dc8cdbb527557e37ff9f10f0d22049a59528a5b27aac94d856c585bf7df518e20788d84d0225155f250a916ca4ccab5f628ee67ea49c676a15762b73c3cb1da5177b43073e7f09f4cf7eff04d0f8fa66051d0417c483f7cce8cbe256f9b7ce002daf21205b2077ae17b32e60b26d382284a3ca4d2a284a35fc947f4f50dfbd0c58bf0d2fecd4f5f0290f3773f833915de9ba200129ac30eca0d6ffdefb3ddd130a905425d5ed561ac7e7e03b942265dca9e7701efee40859ebaefe648951ec47e1c21d66717a6bc3941b54b1730e013f5d9dea38912855600aba4fc51ad452f54d264fd8214ba2bda3417e0153c287ca5b7dbf33ff7b5d48c3714db3569039ec58f2f56ee185f1d0b7", @ANYBLOB="1a1de7aa75f83d5f7003a98e9a239d4f707d57242c34ccf821451432695eaa6f3d5e25d2b8e44095c83cd94e8f87ef7489c13bddce9400516744cd55727eb15039b8a260e35542e23aaf1689798a7a291c390145247abda1f137e4cf7a99f09299022734a5c0a8e2b8eadb7b4948acb017a9f7ba54435cd4d1750970b28599dca779ea7772783692397005126f94f73e55f3dd2ae610ba08880aaa9053d7b6f1e25b97542fb00ccb1278dd93f487a2637cfd8d35cdff0ab8e6723cfc74d0cc81924adfcc983de28972c6bcfcd6061dd5b5f56a64454a46c121bbeb2be3481b52e29f", @ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYPTR], @ANYRESOCT, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYRES32=r7, @ANYRESHEX, @ANYRES64, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES16=0x0]], @ANYRESDEC], 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa198) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f00000000c0)=0xffff) r9 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r9) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 10:12:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:02 executing program 5 (fault-call:4 fault-nth:37): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff000000) 10:12:02 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff000000) [ 1522.977662][ T1726] xt_TCPMSS: Only works on TCP SYN packets [ 1523.040866][ T1732] FAULT_INJECTION: forcing a failure. [ 1523.040866][ T1732] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.105696][ T1732] CPU: 1 PID: 1732 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1523.115535][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1523.115650][ T1728] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1523.125589][ T1732] Call Trace: [ 1523.125620][ T1732] dump_stack+0x197/0x210 [ 1523.125650][ T1732] should_fail.cold+0x5/0xf [ 1523.125673][ T1732] ? setup_fault_attr+0x1f0/0x1f0 [ 1523.125698][ T1732] ? ___might_sleep+0x163/0x2c0 [ 1523.125723][ T1732] __should_failslab+0xb7/0x100 [ 1523.125745][ T1732] should_failslab+0x9/0x14 [ 1523.146056][T30521] block nbd2: Receive control failed (result -107) [ 1523.148581][ T1732] kmem_cache_alloc_trace+0x2d3/0x790 [ 1523.148603][ T1732] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1523.148634][ T1732] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1523.148662][ T1732] __list_lru_init+0x3fe/0x710 [ 1523.148692][ T1732] alloc_super+0x7cc/0x910 [ 1523.148720][ T1732] sget+0x117/0x560 [ 1523.148736][ T1732] ? get_anon_bdev+0xc0/0xc0 [ 1523.175443][ T2631] block nbd2: Attempted send on invalid socket [ 1523.180090][ T1732] ? ovl_show_options+0x5f0/0x5f0 [ 1523.180111][ T1732] mount_nodev+0x31/0x110 [ 1523.180131][ T1732] ovl_mount+0x2d/0x40 [ 1523.180148][ T1732] ? ovl_own_xattr_set+0x10/0x10 [ 1523.180166][ T1732] legacy_get_tree+0x108/0x220 [ 1523.180197][ T1732] vfs_get_tree+0x8e/0x300 [ 1523.180219][ T1732] do_mount+0x135a/0x1b50 [ 1523.186305][ T2631] block nbd2: shutting down sockets [ 1523.191909][ T1732] ? copy_mount_string+0x40/0x40 [ 1523.191937][ T1732] ? _copy_from_user+0x12c/0x1a0 [ 1523.191963][ T1732] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1523.191991][ T1732] __x64_sys_mount+0x192/0x230 [ 1523.192018][ T1732] do_syscall_64+0xfa/0x790 [ 1523.197778][ T2631] print_req_error: 2 callbacks suppressed [ 1523.197813][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.201388][ T1732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1523.201408][ T1732] RIP: 0033:0x45c6c9 [ 1523.201425][ T1732] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1523.205587][ T2631] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1523.209927][ T1732] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1523.209941][ T1732] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 10:12:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:02 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff010000) [ 1523.209949][ T1732] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1523.209957][ T1732] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1523.209965][ T1732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1523.209972][ T1732] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000025 [ 1523.249331][ T1733] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1523.255505][ T2631] Buffer I/O error on dev nbd2, logical block 1, async page read 10:12:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff010000) [ 1523.406673][ T2631] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1523.414496][ T2631] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1523.426128][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.437032][ T2631] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1523.444821][ T2631] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1523.452630][ T2631] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1523.460473][ T2631] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1523.471668][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.482692][ T2631] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1523.490629][ T2631] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1523.500477][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.512585][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.524985][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.537579][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.550351][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.561422][ T1730] ldm_validate_partition_table(): Disk read failed. [ 1523.571480][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.584110][ T2631] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1523.598937][ T1730] Dev nbd2: unable to read RDB block 0 10:12:03 executing program 5 (fault-call:4 fault-nth:38): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1523.612508][ T1730] nbd2: unable to read partition table [ 1523.690485][ T1915] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1523.742135][T30521] block nbd2: Receive control failed (result -107) [ 1523.752653][ T1944] block nbd2: shutting down sockets [ 1523.754154][ T1730] ldm_validate_partition_table(): Disk read failed. [ 1523.765461][ T1730] Dev nbd2: unable to read RDB block 0 [ 1523.771970][ T1730] nbd2: unable to read partition table [ 1523.810622][ T1977] FAULT_INJECTION: forcing a failure. [ 1523.810622][ T1977] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.823559][ T1977] CPU: 0 PID: 1977 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1523.833368][ T1977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1523.843429][ T1977] Call Trace: [ 1523.846747][ T1977] dump_stack+0x197/0x210 [ 1523.851107][ T1977] should_fail.cold+0x5/0xf [ 1523.855641][ T1977] ? setup_fault_attr+0x1f0/0x1f0 [ 1523.857778][ T1973] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1523.860790][ T1977] ? ___might_sleep+0x163/0x2c0 [ 1523.860825][ T1977] __should_failslab+0xb7/0x100 [ 1523.860848][ T1977] should_failslab+0x9/0x14 [ 1523.889154][ T1977] kmem_cache_alloc_trace+0x2d3/0x790 [ 1523.894583][ T1977] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1523.896084][ T1915] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1523.900413][ T1977] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1523.900444][ T1977] __list_lru_init+0x3fe/0x710 [ 1523.900474][ T1977] alloc_super+0x7cc/0x910 [ 1523.929452][ T1977] sget+0x117/0x560 [ 1523.933277][ T1977] ? get_anon_bdev+0xc0/0xc0 [ 1523.937880][ T1977] ? ovl_show_options+0x5f0/0x5f0 [ 1523.942937][ T1977] mount_nodev+0x31/0x110 [ 1523.947274][ T1977] ovl_mount+0x2d/0x40 [ 1523.951349][ T1977] ? ovl_own_xattr_set+0x10/0x10 [ 1523.956297][ T1977] legacy_get_tree+0x108/0x220 [ 1523.961057][ T1977] vfs_get_tree+0x8e/0x300 [ 1523.965590][ T1977] do_mount+0x135a/0x1b50 [ 1523.969934][ T1977] ? copy_mount_string+0x40/0x40 [ 1523.975000][ T1977] ? _copy_from_user+0x12c/0x1a0 [ 1523.979968][ T1977] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1523.986217][ T1977] __x64_sys_mount+0x192/0x230 [ 1523.991112][ T1977] do_syscall_64+0xfa/0x790 [ 1523.995746][ T1977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1524.001643][ T1977] RIP: 0033:0x45c6c9 [ 1524.005537][ T1977] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1524.025431][ T1977] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1524.033848][ T1977] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1524.041836][ T1977] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1524.049822][ T1977] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 10:12:03 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff0f0000) [ 1524.057789][ T1977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1524.065762][ T1977] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000026 10:12:03 executing program 5 (fault-call:4 fault-nth:39): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1524.290622][ T1980] FAULT_INJECTION: forcing a failure. [ 1524.290622][ T1980] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.303498][ T1980] CPU: 0 PID: 1980 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1524.313316][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.323379][ T1980] Call Trace: [ 1524.326692][ T1980] dump_stack+0x197/0x210 [ 1524.331052][ T1980] should_fail.cold+0x5/0xf [ 1524.335589][ T1980] ? setup_fault_attr+0x1f0/0x1f0 [ 1524.340650][ T1980] ? ___might_sleep+0x163/0x2c0 [ 1524.345537][ T1980] __should_failslab+0xb7/0x100 [ 1524.350414][ T1980] should_failslab+0x9/0x14 [ 1524.354932][ T1980] kmem_cache_alloc_trace+0x2d3/0x790 [ 1524.359560][ T1983] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1524.360311][ T1980] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1524.360341][ T1980] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1524.385912][ T1980] __list_lru_init+0x3fe/0x710 [ 1524.390712][ T1980] alloc_super+0x7f7/0x910 [ 1524.395162][ T1980] sget+0x117/0x560 [ 1524.398969][ T1980] ? get_anon_bdev+0xc0/0xc0 [ 1524.403546][ T1980] ? ovl_show_options+0x5f0/0x5f0 [ 1524.408555][ T1980] mount_nodev+0x31/0x110 [ 1524.412870][ T1980] ovl_mount+0x2d/0x40 [ 1524.416932][ T1980] ? ovl_own_xattr_set+0x10/0x10 [ 1524.421891][ T1980] legacy_get_tree+0x108/0x220 [ 1524.426648][ T1980] vfs_get_tree+0x8e/0x300 [ 1524.431052][ T1980] do_mount+0x135a/0x1b50 [ 1524.435375][ T1980] ? copy_mount_string+0x40/0x40 [ 1524.440314][ T1980] ? _copy_from_user+0x12c/0x1a0 [ 1524.445252][ T1980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1524.451477][ T1980] __x64_sys_mount+0x192/0x230 [ 1524.456227][ T1980] do_syscall_64+0xfa/0x790 [ 1524.460734][ T1980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1524.466630][ T1980] RIP: 0033:0x45c6c9 [ 1524.470521][ T1980] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1524.490157][ T1980] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1524.498554][ T1980] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1524.506506][ T1980] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1524.514461][ T1980] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1524.522412][ T1980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1524.530371][ T1980] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000027 10:12:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x33]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:04 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffff000) 10:12:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = gettid() sched_getparam(r3, &(0x7f0000000100)) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r6 = fcntl$dupfd(r5, 0x0, r2) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f00000002c0)='./bus\x00', r6) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r8}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000240)={0x4, 0x4000}) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB, @ANYRESOCT=r1, @ANYRESHEX=r3, @ANYBLOB="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", @ANYBLOB="1a1de7aa75f83d5f7003a98e9a239d4f707d57242c34ccf821451432695eaa6f3d5e25d2b8e44095c83cd94e8f87ef7489c13bddce9400516744cd55727eb15039b8a260e35542e23aaf1689798a7a291c390145247abda1f137e4cf7a99f09299022734a5c0a8e2b8eadb7b4948acb017a9f7ba54435cd4d1750970b28599dca779ea7772783692397005126f94f73e55f3dd2ae610ba08880aaa9053d7b6f1e25b97542fb00ccb1278dd93f487a2637cfd8d35cdff0ab8e6723cfc74d0cc81924adfcc983de28972c6bcfcd6061dd5b5f56a64454a46c121bbeb2be3481b52e29f", @ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYPTR], @ANYRESOCT, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYRES32=r7, @ANYRESHEX, @ANYRES64, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES16=0x0]], @ANYRESDEC], 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa198) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f00000000c0)=0xffff) r9 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r9) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 10:12:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xffffff8c) 10:12:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:04 executing program 5 (fault-call:4 fault-nth:40): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1525.076891][ T2000] xt_TCPMSS: Only works on TCP SYN packets [ 1525.142792][ T1991] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1525.144366][ T1996] FAULT_INJECTION: forcing a failure. [ 1525.144366][ T1996] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.182035][ T1999] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1525.249123][ T1996] CPU: 1 PID: 1996 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1525.258964][ T1996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.269037][ T1996] Call Trace: [ 1525.272349][ T1996] dump_stack+0x197/0x210 [ 1525.276718][ T1996] should_fail.cold+0x5/0xf [ 1525.281239][ T1996] ? setup_fault_attr+0x1f0/0x1f0 [ 1525.286292][ T1996] ? ___might_sleep+0x163/0x2c0 [ 1525.291265][ T1996] __should_failslab+0xb7/0x100 [ 1525.296138][ T1996] should_failslab+0x9/0x14 [ 1525.300657][ T1996] __kmalloc+0x2e0/0x770 [ 1525.304922][ T1996] ? _find_next_bit.constprop.0+0x17a/0x200 [ 1525.310836][ T1996] ? __list_lru_init+0xd1/0x710 [ 1525.315716][ T1996] __list_lru_init+0xd1/0x710 [ 1525.320416][ T1996] alloc_super+0x7f7/0x910 [ 1525.323187][ T1999] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1525.324859][ T1996] sget+0x117/0x560 [ 1525.324875][ T1996] ? get_anon_bdev+0xc0/0xc0 [ 1525.324900][ T1996] ? ovl_show_options+0x5f0/0x5f0 [ 1525.352589][ T1996] mount_nodev+0x31/0x110 [ 1525.356934][ T1996] ovl_mount+0x2d/0x40 [ 1525.361027][ T1996] ? ovl_own_xattr_set+0x10/0x10 [ 1525.365987][ T1996] legacy_get_tree+0x108/0x220 [ 1525.370781][ T1996] vfs_get_tree+0x8e/0x300 [ 1525.375222][ T1996] do_mount+0x135a/0x1b50 [ 1525.379591][ T1996] ? copy_mount_string+0x40/0x40 [ 1525.384560][ T1996] ? _copy_from_user+0x12c/0x1a0 [ 1525.389536][ T1996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1525.395834][ T1996] __x64_sys_mount+0x192/0x230 [ 1525.400723][ T1996] do_syscall_64+0xfa/0x790 [ 1525.405255][ T1996] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1525.411257][ T1996] RIP: 0033:0x45c6c9 [ 1525.415167][ T1996] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1525.434898][ T1996] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:12:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffff6) [ 1525.443326][ T1996] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1525.451313][ T1996] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1525.459298][ T1996] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1525.467280][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1525.475364][ T1996] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000028 [ 1525.478738][T30521] block nbd2: Receive control failed (result -107) [ 1525.521071][ T2631] block nbd2: Attempted send on invalid socket [ 1525.527709][ T2631] block nbd2: shutting down sockets [ 1525.543218][ T1995] ldm_validate_partition_table(): Disk read failed. [ 1525.557708][ T1995] Dev nbd2: unable to read RDB block 0 10:12:04 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xffffff8c) [ 1525.573250][ T1995] nbd2: unable to read partition table 10:12:05 executing program 5 (fault-call:4 fault-nth:41): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = gettid() sched_getparam(r3, &(0x7f0000000100)) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r4}) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r6 = fcntl$dupfd(r5, 0x0, r2) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f00000002c0)='./bus\x00', r6) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r8}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000240)={0x4, 0x4000}) accept$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB, @ANYRESOCT=r1, @ANYRESHEX=r3, @ANYBLOB="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", @ANYBLOB="1a1de7aa75f83d5f7003a98e9a239d4f707d57242c34ccf821451432695eaa6f3d5e25d2b8e44095c83cd94e8f87ef7489c13bddce9400516744cd55727eb15039b8a260e35542e23aaf1689798a7a291c390145247abda1f137e4cf7a99f09299022734a5c0a8e2b8eadb7b4948acb017a9f7ba54435cd4d1750970b28599dca779ea7772783692397005126f94f73e55f3dd2ae610ba08880aaa9053d7b6f1e25b97542fb00ccb1278dd93f487a2637cfd8d35cdff0ab8e6723cfc74d0cc81924adfcc983de28972c6bcfcd6061dd5b5f56a64454a46c121bbeb2be3481b52e29f", @ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYPTR], @ANYRESOCT, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYRES32=r7, @ANYRESHEX, @ANYRES64, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES16=0x0]], @ANYRESDEC], 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa198) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f00000000c0)=0xffff) r9 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r9) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 10:12:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1525.881396][ T2221] FAULT_INJECTION: forcing a failure. [ 1525.881396][ T2221] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.901552][ T2222] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1525.928792][ T2221] CPU: 0 PID: 2221 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1525.938627][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.948687][ T2221] Call Trace: [ 1525.952001][ T2221] dump_stack+0x197/0x210 [ 1525.956359][ T2221] should_fail.cold+0x5/0xf [ 1525.960893][ T2221] ? setup_fault_attr+0x1f0/0x1f0 [ 1525.962831][ T2223] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1525.965944][ T2221] ? ___might_sleep+0x163/0x2c0 [ 1525.981546][ T2221] __should_failslab+0xb7/0x100 [ 1525.986416][ T2221] should_failslab+0x9/0x14 [ 1525.990929][ T2221] kmem_cache_alloc_trace+0x2d3/0x790 [ 1525.996317][ T2221] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1526.002160][ T2221] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1526.007817][ T2221] __list_lru_init+0x3fe/0x710 [ 1526.012648][ T2221] alloc_super+0x7f7/0x910 [ 1526.017088][ T2221] sget+0x117/0x560 [ 1526.020923][ T2221] ? get_anon_bdev+0xc0/0xc0 [ 1526.025536][ T2221] ? ovl_show_options+0x5f0/0x5f0 [ 1526.030576][ T2221] mount_nodev+0x31/0x110 [ 1526.034922][ T2221] ovl_mount+0x2d/0x40 [ 1526.037065][ T2226] xt_TCPMSS: Only works on TCP SYN packets [ 1526.039002][ T2221] ? ovl_own_xattr_set+0x10/0x10 [ 1526.039019][ T2221] legacy_get_tree+0x108/0x220 [ 1526.039043][ T2221] vfs_get_tree+0x8e/0x300 [ 1526.059071][ T2221] do_mount+0x135a/0x1b50 [ 1526.063426][ T2221] ? copy_mount_string+0x40/0x40 [ 1526.068385][ T2221] ? _copy_from_user+0x12c/0x1a0 [ 1526.073351][ T2221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1526.079829][ T2221] __x64_sys_mount+0x192/0x230 [ 1526.084615][ T2221] do_syscall_64+0xfa/0x790 [ 1526.089147][ T2221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1526.095145][ T2221] RIP: 0033:0x45c6c9 [ 1526.099049][ T2221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1526.107592][ T2223] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1526.118761][ T2221] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1526.118777][ T2221] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1526.118785][ T2221] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1526.118794][ T2221] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1526.118803][ T2221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1526.118812][ T2221] R13: 0000000000000750 R14: 00000000004c9f5b R15: 0000000000000029 [ 1526.187833][T30521] block nbd2: Receive control failed (result -107) [ 1526.229038][ T2218] block nbd2: shutting down sockets 10:12:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x38]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:05 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getgid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001ffffffe30000ec00000000000000"], 0x18, 0x8405}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={r4, @in={{0x2, 0x0, @loopback}}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xc9, 0x1f, 0x4, 0x1e, 0x0, 0x8, 0x5b32, 0x5, r4}, 0x20) sendfile(r1, r0, 0x0, 0x4) 10:12:05 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffff6) 10:12:05 executing program 5 (fault-call:4 fault-nth:42): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1526.730928][ T2338] FAULT_INJECTION: forcing a failure. [ 1526.730928][ T2338] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.754769][ T2345] [ 1526.757125][ T2345] ====================================================== [ 1526.764146][ T2345] WARNING: possible circular locking dependency detected [ 1526.771262][ T2345] 5.6.0-rc1-next-20200214-syzkaller #0 Not tainted [ 1526.777758][ T2345] ------------------------------------------------------ [ 1526.784776][ T2345] syz-executor.2/2345 is trying to acquire lock: [ 1526.791095][ T2345] ffff8880a7b569a0 (&p->lock){+.+.}, at: seq_read+0x71/0x1170 [ 1526.798574][ T2345] [ 1526.798574][ T2345] but task is already holding lock: [ 1526.805934][ T2345] ffff88809930e418 (sb_writers#3){.+.+}, at: do_sendfile+0x9b9/0xd00 [ 1526.809336][ T2374] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1526.814064][ T2345] [ 1526.814064][ T2345] which lock already depends on the new lock. [ 1526.814064][ T2345] [ 1526.814070][ T2345] [ 1526.814070][ T2345] the existing dependency chain (in reverse order) is: [ 1526.814074][ T2345] [ 1526.814074][ T2345] -> #3 (sb_writers#3){.+.+}: [ 1526.814104][ T2345] __sb_start_write+0x255/0x4a0 [ 1526.814126][ T2345] mnt_want_write+0x3f/0xc0 [ 1526.865010][ T2345] ovl_want_write+0x76/0xa0 [ 1526.870037][ T2345] ovl_xattr_set+0x53/0x5b0 [ 1526.875069][ T2345] ovl_other_xattr_set+0x39/0x50 [ 1526.880529][ T2345] __vfs_setxattr+0x11f/0x180 [ 1526.885733][ T2345] __vfs_setxattr_noperm+0x11c/0x410 [ 1526.891548][ T2345] vfs_setxattr+0xda/0x100 [ 1526.896492][ T2345] setxattr+0x26f/0x380 [ 1526.901190][ T2345] path_setxattr+0x197/0x1b0 [ 1526.906304][ T2345] __x64_sys_lsetxattr+0xc1/0x150 [ 1526.911857][ T2345] do_syscall_64+0xfa/0x790 [ 1526.916882][ T2345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1526.923396][ T2345] [ 1526.923396][ T2345] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}: [ 1526.931571][ T2345] down_read+0x95/0x440 [ 1526.936254][ T2345] path_openat+0x1c4f/0x33f0 [ 1526.941478][ T2345] do_filp_open+0x192/0x260 [ 1526.946504][ T2345] do_open_execat+0x13b/0x6d0 [ 1526.951702][ T2345] __do_execve_file.isra.0+0x16d5/0x2270 [ 1526.957860][ T2345] __x64_sys_execve+0x8f/0xc0 [ 1526.963065][ T2345] do_syscall_64+0xfa/0x790 [ 1526.968099][ T2345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1526.974511][ T2345] [ 1526.974511][ T2345] -> #1 (&sig->cred_guard_mutex){+.+.}: [ 1526.982245][ T2345] __mutex_lock+0x156/0x13c0 [ 1526.987366][ T2345] mutex_lock_killable_nested+0x16/0x20 [ 1526.993433][ T2345] lock_trace+0x4a/0xe0 [ 1526.998115][ T2345] proc_pid_personality+0x1c/0xd0 [ 1527.003668][ T2345] proc_single_show+0xfd/0x1c0 [ 1527.008967][ T2345] seq_read+0x4ca/0x1170 [ 1527.013733][ T2345] __vfs_read+0x8a/0x110 [ 1527.018495][ T2345] vfs_read+0x1f0/0x440 [ 1527.023175][ T2345] ksys_read+0x14f/0x290 [ 1527.027941][ T2345] __x64_sys_read+0x73/0xb0 [ 1527.033067][ T2345] do_syscall_64+0xfa/0x790 [ 1527.038097][ T2345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1527.044502][ T2345] [ 1527.044502][ T2345] -> #0 (&p->lock){+.+.}: [ 1527.051011][ T2345] __lock_acquire+0x29cd/0x6320 [ 1527.056382][ T2345] lock_acquire+0x190/0x410 [ 1527.061405][ T2345] __mutex_lock+0x156/0x13c0 [ 1527.066515][ T2345] mutex_lock_nested+0x16/0x20 [ 1527.071887][ T2345] seq_read+0x71/0x1170 [ 1527.076585][ T2345] proc_reg_read+0x1f8/0x2b0 [ 1527.081702][ T2345] do_iter_read+0x4a4/0x660 [ 1527.086721][ T2345] vfs_readv+0xf0/0x160 [ 1527.091407][ T2345] default_file_splice_read+0x4fb/0xa20 [ 1527.097487][ T2345] do_splice_to+0x127/0x180 [ 1527.102666][ T2345] splice_direct_to_actor+0x320/0xa30 [ 1527.108602][ T2345] do_splice_direct+0x1da/0x2a0 [ 1527.113976][ T2345] do_sendfile+0x597/0xd00 [ 1527.118975][ T2345] __x64_sys_sendfile64+0x1dd/0x220 [ 1527.124696][ T2345] do_syscall_64+0xfa/0x790 [ 1527.129725][ T2345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1527.136137][ T2345] [ 1527.136137][ T2345] other info that might help us debug this: [ 1527.136137][ T2345] [ 1527.146360][ T2345] Chain exists of: [ 1527.146360][ T2345] &p->lock --> &ovl_i_mutex_dir_key[depth] --> sb_writers#3 [ 1527.146360][ T2345] [ 1527.159550][ T2345] Possible unsafe locking scenario: [ 1527.159550][ T2345] [ 1527.167011][ T2345] CPU0 CPU1 [ 1527.172397][ T2345] ---- ---- [ 1527.177760][ T2345] lock(sb_writers#3); [ 1527.181921][ T2345] lock(&ovl_i_mutex_dir_key[depth]); [ 1527.189987][ T2345] lock(sb_writers#3); [ 1527.196659][ T2345] lock(&p->lock); [ 1527.200518][ T2345] [ 1527.200518][ T2345] *** DEADLOCK *** [ 1527.200518][ T2345] [ 1527.208669][ T2345] 1 lock held by syz-executor.2/2345: [ 1527.214038][ T2345] #0: ffff88809930e418 (sb_writers#3){.+.+}, at: do_sendfile+0x9b9/0xd00 [ 1527.222552][ T2345] [ 1527.222552][ T2345] stack backtrace: [ 1527.228465][ T2345] CPU: 0 PID: 2345 Comm: syz-executor.2 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1527.238262][ T2345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.248311][ T2345] Call Trace: [ 1527.251617][ T2345] dump_stack+0x197/0x210 [ 1527.255991][ T2345] print_circular_bug.isra.0.cold+0x163/0x172 [ 1527.262069][ T2345] check_noncircular+0x32e/0x3e0 [ 1527.267124][ T2345] ? print_circular_bug.isra.0+0x230/0x230 [ 1527.272978][ T2345] ? alloc_list_entry+0xc0/0xc0 [ 1527.277931][ T2345] ? mark_lock+0xc2/0x1220 [ 1527.282353][ T2345] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1527.288106][ T2345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1527.294495][ T2345] ? find_first_zero_bit+0x9a/0xc0 [ 1527.299626][ T2345] __lock_acquire+0x29cd/0x6320 [ 1527.304507][ T2345] ? mark_held_locks+0xf0/0xf0 [ 1527.309281][ T2345] lock_acquire+0x190/0x410 [ 1527.313798][ T2345] ? seq_read+0x71/0x1170 [ 1527.318144][ T2345] __mutex_lock+0x156/0x13c0 [ 1527.322741][ T2345] ? seq_read+0x71/0x1170 [ 1527.327190][ T2345] ? seq_read+0x71/0x1170 [ 1527.331531][ T2345] ? mutex_trylock+0x2d0/0x2d0 [ 1527.336303][ T2345] ? aa_path_link+0x350/0x350 [ 1527.340989][ T2345] ? prep_new_page+0x13b/0x200 [ 1527.345765][ T2345] ? get_page_from_freelist+0x1741/0x4330 [ 1527.351490][ T2345] ? trace_hardirqs_on_caller+0x6a/0x240 [ 1527.357237][ T2345] ? stack_trace_save+0x8f/0xc0 [ 1527.362108][ T2345] ? seq_open_private+0x50/0x50 [ 1527.366975][ T2345] mutex_lock_nested+0x16/0x20 [ 1527.371747][ T2345] ? fsnotify+0x7fd/0xbb0 [ 1527.376197][ T2345] ? mutex_lock_nested+0x16/0x20 [ 1527.381151][ T2345] seq_read+0x71/0x1170 [ 1527.385324][ T2345] ? _copy_from_user+0x12c/0x1a0 [ 1527.390278][ T2345] ? seq_open_private+0x50/0x50 [ 1527.395141][ T2345] proc_reg_read+0x1f8/0x2b0 [ 1527.399745][ T2345] ? proc_reg_unlocked_ioctl+0x2a0/0x2a0 [ 1527.405387][ T2345] ? rw_verify_area+0x126/0x360 [ 1527.410251][ T2345] do_iter_read+0x4a4/0x660 [ 1527.414762][ T2345] ? dup_iter+0x260/0x260 [ 1527.419106][ T2345] vfs_readv+0xf0/0x160 [ 1527.423295][ T2345] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1527.429472][ T2345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1527.434943][ T2345] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1527.440239][ T2345] ? retint_kernel+0x2b/0x2b [ 1527.444851][ T2345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1527.450322][ T2345] ? __this_cpu_preempt_check+0x35/0x190 [ 1527.455961][ T2345] ? retint_kernel+0x2b/0x2b [ 1527.460562][ T2345] ? iov_iter_get_pages_alloc+0x3a5/0x15b0 [ 1527.466392][ T2345] default_file_splice_read+0x4fb/0xa20 [ 1527.471946][ T2345] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1527.477754][ T2345] ? kasan_kmalloc+0x9/0x10 [ 1527.482260][ T2345] ? alloc_pipe_info+0x1dd/0x520 [ 1527.487219][ T2345] ? iter_file_splice_write+0xc10/0xc10 [ 1527.492775][ T2345] ? memcg_kmem_put_cache+0xad/0x1a0 [ 1527.498092][ T2345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1527.504353][ T2345] ? fsnotify+0x7fd/0xbb0 [ 1527.508815][ T2345] ? fsnotify_first_mark+0x210/0x210 [ 1527.514112][ T2345] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1527.520104][ T2345] ? security_file_permission+0x8f/0x380 [ 1527.525773][ T2345] ? rw_verify_area+0x126/0x360 [ 1527.530640][ T2345] ? iter_file_splice_write+0xc10/0xc10 [ 1527.536195][ T2345] do_splice_to+0x127/0x180 [ 1527.540713][ T2345] splice_direct_to_actor+0x320/0xa30 [ 1527.546094][ T2345] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1527.551648][ T2345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1527.557904][ T2345] ? do_splice_to+0x180/0x180 [ 1527.562598][ T2345] ? rw_verify_area+0x126/0x360 [ 1527.567556][ T2345] do_splice_direct+0x1da/0x2a0 [ 1527.572418][ T2345] ? splice_direct_to_actor+0xa30/0xa30 [ 1527.577984][ T2345] ? rcu_read_lock_any_held+0xcd/0xf0 [ 1527.583472][ T2345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1527.589916][ T2345] ? __this_cpu_preempt_check+0x35/0x190 [ 1527.595555][ T2345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1527.601792][ T2345] ? __sb_start_write+0x1f6/0x4a0 [ 1527.606814][ T2345] do_sendfile+0x597/0xd00 [ 1527.611226][ T2345] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1527.616572][ T2345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1527.622836][ T2345] ? put_timespec64+0xda/0x140 [ 1527.627602][ T2345] ? __x64_sys_futex+0x404/0x590 [ 1527.632579][ T2345] ? retint_kernel+0x2b/0x2b [ 1527.637176][ T2345] __x64_sys_sendfile64+0x1dd/0x220 [ 1527.642367][ T2345] ? __ia32_sys_sendfile+0x230/0x230 [ 1527.647650][ T2345] ? do_syscall_64+0x26/0x790 [ 1527.652372][ T2345] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1527.657651][ T2345] ? trace_hardirqs_on+0x67/0x240 [ 1527.662681][ T2345] do_syscall_64+0xfa/0x790 [ 1527.667234][ T2345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1527.673210][ T2345] RIP: 0033:0x45c6c9 [ 1527.677092][ T2345] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1527.696682][ T2345] RSP: 002b:00007fa335527c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1527.705093][ T2345] RAX: ffffffffffffffda RBX: 00007fa3355286d4 RCX: 000000000045c6c9 [ 1527.713065][ T2345] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1527.721023][ T2345] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 10:12:07 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x20000000000000) [ 1527.729088][ T2345] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000ffffffff [ 1527.737050][ T2345] R13: 00000000000008cb R14: 00000000004cb58f R15: 000000000076bf2c [ 1527.760889][ T2344] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1527.772769][ T2338] CPU: 0 PID: 2338 Comm: syz-executor.5 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1527.782600][ T2338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.792665][ T2338] Call Trace: [ 1527.795964][ T2338] dump_stack+0x197/0x210 [ 1527.800304][ T2338] should_fail.cold+0x5/0xf [ 1527.804812][ T2338] ? setup_fault_attr+0x1f0/0x1f0 [ 1527.809853][ T2338] ? ___might_sleep+0x163/0x2c0 [ 1527.814707][ T2338] __should_failslab+0xb7/0x100 [ 1527.819555][ T2338] should_failslab+0x9/0x14 [ 1527.824157][ T2338] kmem_cache_alloc_trace+0x2d3/0x790 [ 1527.829649][ T2338] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1527.835452][ T2338] __memcg_init_list_lru_node+0x8a/0x1e0 [ 1527.841201][ T2338] __list_lru_init+0x3fe/0x710 [ 1527.845990][ T2338] alloc_super+0x7f7/0x910 [ 1527.850423][ T2338] sget+0x117/0x560 [ 1527.854230][ T2338] ? get_anon_bdev+0xc0/0xc0 [ 1527.858942][ T2338] ? ovl_show_options+0x5f0/0x5f0 [ 1527.863962][ T2338] mount_nodev+0x31/0x110 [ 1527.868292][ T2338] ovl_mount+0x2d/0x40 [ 1527.872357][ T2338] ? ovl_own_xattr_set+0x10/0x10 [ 1527.877292][ T2338] legacy_get_tree+0x108/0x220 [ 1527.882098][ T2338] vfs_get_tree+0x8e/0x300 [ 1527.886516][ T2338] do_mount+0x135a/0x1b50 [ 1527.890850][ T2338] ? copy_mount_string+0x40/0x40 [ 1527.895886][ T2338] ? _copy_from_user+0x12c/0x1a0 [ 1527.900841][ T2338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1527.907079][ T2338] __x64_sys_mount+0x192/0x230 [ 1527.911847][ T2338] do_syscall_64+0xfa/0x790 [ 1527.916344][ T2338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1527.922233][ T2338] RIP: 0033:0x45c6c9 [ 1527.926126][ T2338] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1527.945823][ T2338] RSP: 002b:00007fdefb53cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1527.954234][ T2338] RAX: ffffffffffffffda RBX: 00007fdefb53d6d4 RCX: 000000000045c6c9 [ 1527.962197][ T2338] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400000 [ 1527.970163][ T2338] RBP: 000000000076bf20 R08: 0000000020000400 R09: 0000000000000000 [ 1527.978125][ T2338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:12:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1527.986091][ T2338] R13: 0000000000000750 R14: 00000000004c9f5b R15: 000000000000002a [ 1528.011049][ T2344] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:07 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:07 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) getgid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001ffffffe30000ec00000000000000"], 0x18, 0x8405}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={r4, @in={{0x2, 0x0, @loopback}}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xc9, 0x1f, 0x4, 0x1e, 0x0, 0x8, 0x5b32, 0x5, r4}, 0x20) sendfile(r1, r0, 0x0, 0x4) [ 1528.161769][ T2457] xt_TCPMSS: Only works on TCP SYN packets [ 1528.173092][ T2456] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1528.177686][ T2454] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:07 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xa000a0ffffffff) [ 1528.312848][ T2535] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1528.365222][ T2535] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1528.454738][ T2572] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:08 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:08 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x100000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:08 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xa000a0ffffffff) 10:12:08 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x100000000000000) 10:12:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:08 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x200000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1528.715678][ T2579] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1528.727170][ T2578] xt_TCPMSS: Only works on TCP SYN packets [ 1528.767505][ T2579] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:08 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xf0ffffffffffff) [ 1528.841243][ T2702] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:08 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:08 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x200000000000000) 10:12:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1529.080959][ T2820] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1529.094798][ T2821] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1529.132835][ T2824] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1529.150468][ T2825] xt_TCPMSS: Only works on TCP SYN packets [ 1529.160415][ T2826] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1529.164777][ T2821] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:08 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:08 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x300000000000000) 10:12:08 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400003, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:08 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x100000000000000) 10:12:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1529.548804][ T2943] xt_TCPMSS: Only works on TCP SYN packets [ 1529.551033][ T2946] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1529.581672][ T2947] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1529.611226][ T3028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1529.617990][ T3042] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:09 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400004, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1529.676107][ T2947] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:09 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x400000000000000) 10:12:09 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:09 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x200000000000000) 10:12:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1529.897818][ T3165] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1529.933968][ T3168] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1529.953423][ T3174] xt_TCPMSS: Only works on TCP SYN packets [ 1529.974276][ T3176] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1529.981568][ T3168] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1530.023788][ T3213] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:09 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x300000000000000) 10:12:09 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:09 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400005, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:09 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x500000000000000) 10:12:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1530.388772][ T3287] xt_TCPMSS: Only works on TCP SYN packets [ 1530.412308][ T3289] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:09 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1530.431276][ T3294] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1530.455741][ T3344] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:09 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x400000000000000) [ 1530.483069][ T3294] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1530.490004][ T3378] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:09 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:09 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400006, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:10 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x600000000000000) [ 1530.737647][ T3512] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1530.749373][ T3514] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1530.796282][ T3514] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1530.799429][ T3518] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1530.818964][ T3517] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:10 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:10 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x700000000000000) 10:12:10 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x500000000000000) 10:12:10 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400007, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:10 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1531.279569][ T3531] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1531.302697][ T3538] xt_TCPMSS: Only works on TCP SYN packets [ 1531.329912][ T3537] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1531.350258][ T3561] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1531.370166][ T3531] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1531.371227][ T3592] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:10 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x800000000000000) 10:12:10 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:10 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x600000000000000) 10:12:10 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1531.621199][ T3796] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1531.668207][ T3805] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1531.716343][ T3808] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1531.751400][ T3809] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1531.774968][ T3809] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:11 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:11 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400009, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:11 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x804000000000000) 10:12:11 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x700000000000000) [ 1532.161735][ T3819] xt_TCPMSS: Only works on TCP SYN packets [ 1532.178549][ T3820] overlayfs: failed to resolve './file0': -2 [ 1532.186395][ T3818] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1532.193441][ T3824] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:11 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1532.211481][ T3835] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1532.239978][ T3885] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:11 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc00000000000000) 10:12:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:11 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:11 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x800000000000000) [ 1532.342258][ T3941] overlayfs: failed to resolve './file0': -2 10:12:11 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1532.471937][ T3949] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1532.489607][ T4051] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1532.508786][ T4029] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1532.519822][ T4054] overlayfs: failed to resolve './file0': -2 [ 1532.531052][ T4055] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1532.541907][ T4029] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:12 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:12 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x1200000000000000) 10:12:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:12 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x804000000000000) 10:12:12 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:12 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1533.051693][ T4069] xt_TCPMSS: Only works on TCP SYN packets [ 1533.069828][ T4070] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1533.093571][ T4072] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1533.111058][ T4121] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:12 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3000000000000000) [ 1533.138589][ T4159] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1533.159769][ T4072] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:12 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:12 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:12 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xc00000000000000) 10:12:12 executing program 2: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1533.350587][ T4301] overlayfs: failed to resolve './file1': -2 [ 1533.367169][ T4302] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:12 executing program 2: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1533.406905][ T4304] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1533.442784][ T4306] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1533.508230][ T4310] xt_TCPMSS: Only works on TCP SYN packets [ 1533.543916][ T4311] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1533.548783][ T4335] overlayfs: failed to resolve './file1': -2 [ 1533.590189][ T4311] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:13 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3f00000000000000) 10:12:13 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40000d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:13 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x1200000000000000) 10:12:13 executing program 2: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1533.950779][ T4425] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1533.965691][ T4430] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1533.977449][ T4428] xt_TCPMSS: Only works on TCP SYN packets 10:12:13 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x8cffffff00000000) [ 1533.988614][ T4425] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1533.990884][ T4427] overlayfs: failed to resolve './file1': -2 [ 1534.025148][ T4429] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:13 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x3f00000000000000) 10:12:13 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1534.081258][ T4499] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:13 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400010, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1534.190506][ T4541] overlayfs: failed to resolve './file1': -2 [ 1534.202958][ T4542] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1534.208958][ T4543] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:13 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4800000000000000) [ 1534.235699][ T4542] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1534.337457][ T4547] xt_TCPMSS: Only works on TCP SYN packets [ 1534.403007][ T4597] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1534.429364][ T4614] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1534.468078][ T4656] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1534.477717][ T4597] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:14 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:14 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xf6ffffff00000000) 10:12:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:14 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4c00000000000000) 10:12:14 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400012, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1534.746783][ T4659] overlayfs: failed to resolve './file1': -2 [ 1534.779467][ T4665] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:14 executing program 2: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1534.806132][ T4667] xt_TCPMSS: Only works on TCP SYN packets [ 1534.815815][ T4670] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1534.842654][ T4666] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:14 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400014, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:14 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:14 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x4e26000000000000) [ 1534.894756][ T4760] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1534.903062][ T4736] overlayfs: failed to resolve './file1': -2 [ 1534.916097][ T4666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:14 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfeffffff00000000) [ 1535.061398][ T4779] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:14 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1535.113936][ T4783] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1535.119999][ T4786] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1535.159324][ T4787] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1535.189475][ T4783] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) 10:12:14 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400030, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:14 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:14 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff00000000000000) 10:12:14 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6800000000000000) [ 1535.581414][ T4802] xt_TCPMSS: Only works on TCP SYN packets [ 1535.610256][ T4803] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:15 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1535.621648][ T4800] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1535.650820][ T4852] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1535.670936][ T4909] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:15 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff01000000000000) 10:12:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 1535.702351][ T4800] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:15 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x40005c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:15 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1535.760729][ T4911] overlayfs: failed to resolve './file0': -2 10:12:15 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x6c00000000000000) [ 1535.866873][ T4978] overlayfs: failed to resolve './file0': -2 [ 1535.943504][ T5022] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1535.945228][ T5021] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1535.990824][ T5024] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1536.008036][ T5026] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1536.025001][ T5024] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:15 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) 10:12:15 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xff0f000000000000) 10:12:15 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x4000f0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 10:12:15 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7400000000000000) 10:12:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cd0002", 0x10, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x11]}, @mcast2, {[@hopopts={0x2c}], {0x0, 0x3, 0x8}}}}}, 0x42) [ 1536.411243][ T5034] xt_TCPMSS: Only works on TCP SYN packets [ 1536.426523][ T5038] overlayfs: failed to resolve './file0': -2 [ 1536.446312][ T5035] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:15 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe) [ 1536.464791][ T5040] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1536.481413][ T5066] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1536.483411][ T5079] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:15 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0x7a00000000000000) 10:12:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 10:12:15 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xffffffff00000000) [ 1536.529653][ T5040] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:12:15 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400300, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1536.675430][ T5153] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. 10:12:16 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chmod(&(0x7f0000000080)='./bus/file0\x00', 0xfffffffe)